Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2303372dde201ee30cd17b7b33525e342d300d0dd10bf2922e1d68bcd5bec116N

  • Size

    93KB

  • MD5

    bc86b969a1c887c1d0bec9807bd59c20

  • SHA1

    6145f1a5aa846d5592038b5018bff50f249ba6c7

  • SHA256

    2303372dde201ee30cd17b7b33525e342d300d0dd10bf2922e1d68bcd5bec116

  • SHA512

    0d8ba7e09704512dca244d03e7f3658d2562cdc8065996d0f31da772adbf65fe449a3a015f71fee73db79aa9cc786ed8c3a7fdc76d78f365af7352124c4fc443

  • SSDEEP

    1536:+mzJD/HBZbszKu9AZpt7r1jEwzGi1dDLD6gS:+mSzK4AZHHCi1dT/

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

sarcazm

C2

hakim32.ddns.net:2000

disclaimer-establish.gl.at.ply.gg:45887

Mutex

6a5ef65cabb4f7e7f2ef0d8156f8282b

Attributes
  • reg_key

    6a5ef65cabb4f7e7f2ef0d8156f8282b

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2303372dde201ee30cd17b7b33525e342d300d0dd10bf2922e1d68bcd5bec116N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.