Resubmissions

31-12-2024 22:30

241231-2ertnsspas 10

31-12-2024 22:28

241231-2d43lssnfx 10

General

  • Target

    035e05267a8907c8dbd514c00b0656f48a13b8d8194e4151a3dac987ad15bf61.exe

  • Size

    23KB

  • MD5

    e32b3f1efde5485aedb9d3229278be3f

  • SHA1

    9835fa958fe88131562b913dd3b09df07866a7d2

  • SHA256

    035e05267a8907c8dbd514c00b0656f48a13b8d8194e4151a3dac987ad15bf61

  • SHA512

    cdc2074017afcb94ac85072c03ecc7b50ccfc9a018ad1edf07bb51fb62eaf97827b06b2429b42f84839d47565d7b8f56f8465f172b3c803e4d6c7cdc1c58d8ca

  • SSDEEP

    384:xT2x0W3qZN2ATtRGCfCo9D46BgnqUhL19mRvR6JZlbw8hqIusZzZ9UuN:uh+rdflRpcnuON

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HaCkEd bY LoKn

C2

customers-edmonton.gl.at.ply.gg:28608

Mutex

5a0e6576524fad771bccf79eb40f7eca

Attributes
  • reg_key

    5a0e6576524fad771bccf79eb40f7eca

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 035e05267a8907c8dbd514c00b0656f48a13b8d8194e4151a3dac987ad15bf61.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections