Overview

overview

10

Static

static

10

New folder.zip

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New folder.zip

  • Size

    45KB

  • MD5

    b34610d72838dde5c44bd6997a48c903

  • SHA1

    e46153efe2a2bcafd9fa03be46ca67fe6ad20b8d

  • SHA256

    a61e602cb784d78f33f6d18bd66181b99978665a5097c139b2846b87e1c4a063

  • SHA512

    d4ee7a8bfddbe9c948955c64912f5588ba07abb7fac4da5c9b1267397e961a8aafec0e91044de25be7b77fe2f299b71969866fc3b842535553c6954a84f5da4f

  • SSDEEP

    768:Yg/qN7Df5msVdlrz4XqaKScBdmFITsH9y4FtYs74yRybclk1gGdxR4PipLqHZu3+:Hqh5tVvrk6icBd6EsdyjskGrlggGdxrs

Score
10/10
farteddiscordratnjrat

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTI5OTA1NDUwMzg1Mjc3MzQ3OQ.Gam-5g.mMYt_UiACKf3lceb5vBDHE9GHZi685c16_84bo

  • server_id

    1299046739898011668

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

farted

C2

5.tcp.eu.ngrok.io:13824

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Discordrat family
    discordrat
  • Njrat family
    njrat
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • New folder.zip
    .zip
  • New folder/Client-built.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • New folder/farted lmao.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections