Overview

overview

10

Static

static

10

bb/BD2.Net...or.exe

windows10-2004-x64

8

bb/BD2.Net...or.exe

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb.rar

  • Size

    1.4MB

  • MD5

    82b05d52e36ffd4144a3c7d91bb41b6d

  • SHA1

    6cbd63158d4f7b6c058b9290fbb3fd3771edc0bd

  • SHA256

    489a0bf7836aa97dae47450d649b8ab40172c96b8df5800d721459401a81ef94

  • SHA512

    4989ad06190d45b3629441b74e72f1ded76d059ee5d3ea26003acc3449b6b2bdc2e8da5c47e4759952f34b72726482a95162f88ab6f8a846ca1ec5de0204971f

  • SSDEEP

    24576:WoQyZvN+4y9w05uHxts8MwdDhGXsnFkMW30mII4Fw8cpukXB9+KBueCp0SrWqIr3:gyxN+N9808MwdFFkMjmII42pu8CpFrWx

Score
10/10
?!njrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

?!

C2

away-displays.gl.at.ply.gg:26916

Mutex

0d908776515dcc85e2d9e12ad50db4e5

Attributes
  • reg_key

    0d908776515dcc85e2d9e12ad50db4e5

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • bb.rar
    .rar

    Password: password

  • bb/BD2.Net Injector.exe
    .exe windows:4 windows x86 arch:x86

    Password: password

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bb/DevComponents.DotNetBar2.dll
    .dll windows:4 windows x86 arch:x86

    Password: password

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bb/Helper.exe
    .exe windows:4 windows x86 arch:x86

    Password: password

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bb/LithiumNukerV2.exe
    .exe windows:4 windows x86 arch:x86

    Password: password

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bb/files.resources