Overview

overview

10

Static

static

10

RIP_YOUR_PC_LOL.exe

windows7-x64

10

RIP_YOUR_PC_LOL.exe

windows10-2004-x64

Resubmissions

25/11/2025, 20:48

251125-zlrq5sskhn10

27/09/2025, 04:16

250927-evwq8szycz10

24/09/2025, 18:13

250924-wt7ksabn4110

24/09/2025, 18:09

250924-wrpl7abn3w10

24/09/2025, 17:30

250924-v3fb8axlw710

07/12/2024, 03:49

241207-edgkzszrdj10

04/12/2024, 22:38

241204-2kv4aa1jgn10

04/12/2024, 20:50

241204-zmwrgszrgt

04/12/2024, 20:49

241204-zl1ztawnfk10

04/12/2024, 20:48

241204-zlmgeszrbt10

Sharing

Copy URL Twitter E-mail

General

  • Target
    RIP_YOUR_PC_LOL.exe
  • Size 22.5MB
  • Sample241204-xxpd2sslem
  • SHA256 37d8e1ce3b6e6488942717aa78cb54785edc985143bcc8d9ba9f42d73a3dbd7a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
blackmoonnanocorenjrat

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • Nanocore family
    nanocore
  • Njrat family
    njrat
  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • RIP_YOUR_PC_LOL.exe
    .exe 22.5MB

RIP_YOUR_PC_LOL.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 37d8e1ce3b6e6488942717aa78cb54785edc985143bcc8d9ba9f42d73a3dbd7a
  • MD5 SHA1 SHA512 SSDEEP
windows:4windowsx86arch:x86

  • Detect Blackmoon payload

  • Detected Nirsoft tools

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView

    Password recovery tool for various web browsers

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
23639214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths