Overview

overview

10

Static

static

10

Loader.exe

windows7-x64

8

Loader.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    celestial.zip

  • Size

    17KB

  • MD5

    dceebedf4fa5e053c6d34fa74e87d5d1

  • SHA1

    aead3ea51c1c361fff05f01ce8349bd06294a358

  • SHA256

    9e6846f018d8b872d54cbf3327bb0db39652e984dc7a673afca518ac102a73f1

  • SHA512

    016f82122af81c8560fffbbe11b4a17a08c278419937035850f5030be16244506338047bb908fbb45605d2f27ecf4f493a90d368acadb4042186d4cbcc6c85bc

  • SSDEEP

    384:rmcHIponibHpdbsFX1BiT+ZVQoyFGQmsee/pdgbt0Kwoe7o5T:tGHpeh7LZN6UBe/YJwosoJ

Score
10/10
noobnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

noob

C2

7.tcp.eu.ngrok.io:17304

Mutex

1d465bba0c8a1a9fd459e1c5d5c1ba98

Attributes
  • reg_key

    1d465bba0c8a1a9fd459e1c5d5c1ba98

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • celestial.zip
    .zip

    Password: 123

  • Loader.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections