Resubmissions

30/07/2024, 21:22

240730-z732astepd 10

30/07/2024, 21:18

240730-z5vl5szalj 10

30/07/2024, 21:06

240730-zx8h2atala 10

General

  • Target

    Injectorka.exe

  • Size

    93KB

  • MD5

    c40c09bf0ce0defbe50f123e8d6a6174

  • SHA1

    d39b7893f4ec53f38e3d05051097fb6cfee2ff7f

  • SHA256

    272f68e5e473b2b091e97ee249a7a95aedef51070dcaf94211e573771477a672

  • SHA512

    8f5a3b47ae47e0be43ad2925adc36b661c75f64bec2b3e797fc744925cdc186a1dda85ba2907e5a621f0c61a47662e1d3874ee8b3f7c8b31d79ba6ed3af069c4

  • SSDEEP

    768:RY3PI530YTXspgM0m2zGjpyDtdXWuDtXYLWhyXxrjEtCdnl2pi1Rz4Rk3zsGdpD3:8IZ0AA0mT1mrWnL5jEwzGi1dD/DDgS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Erbaev

C2

hakim32.ddns.net:2000

2.tcp.eu.ngrok.io:14407

Mutex

007c897a11747d51de02720e8e1c37d9

Attributes
  • reg_key

    007c897a11747d51de02720e8e1c37d9

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Injectorka.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections