Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    709d01e2059255e29bf003d6b94cd2514b2fad1c7760d06cc3c1d52ffb0fb512

  • Size

    903KB

  • MD5

    bd5494546a6eeb7543f728c32b23eca6

  • SHA1

    a7269d4e1357a79aac11f8b670122b943cf2c137

  • SHA256

    709d01e2059255e29bf003d6b94cd2514b2fad1c7760d06cc3c1d52ffb0fb512

  • SHA512

    f3b691414f913c83011ae165287bba1211195489724dd69448a8f53d70f30510a34a377278ad1d373dcba317bd8516afd97911a8d3f09f3f669da4cad5ba0f05

  • SSDEEP

    3072:HEA93TEA93TEA93TEA93TEA93TEA93TEA93TEA93TEA93TEA93TEA93TEA93TEAZ:HRRRRRRRRRRRRRRRRRRRRJ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

com-elephant.gl.at.ply.gg:63355

Mutex

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 709d01e2059255e29bf003d6b94cd2514b2fad1c7760d06cc3c1d52ffb0fb512
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections