Resubmissions

11-01-2025 16:21

250111-ttqadswjgq 10

11-01-2025 16:15

250111-tqhfdawjbp 10

General

  • Target

    29947dfd10f863113a0022a97cd82a814f3549163fc689ba7b48c31025696c50N.exe

  • Size

    93KB

  • MD5

    c4539216d5da5ea9bc5d229792adec80

  • SHA1

    d26d62b43c01c5bb7c83105a055efda08b8cc0b8

  • SHA256

    29947dfd10f863113a0022a97cd82a814f3549163fc689ba7b48c31025696c50

  • SHA512

    bdc2bd30c0a44769cb4c12b527b41a04dcb982d1be86edee3643ab3135d006aa9d9324aaffa53faea0d6db5e05526fb91274c63dfbbdbac185e505ede905415c

  • SSDEEP

    1536:Ox4FQWqkqqoLc2m+iIjEwzGi1dDqD3gS:Ox4mkqqoA2xi5i1dkw

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Lunacy PC cracked by ctrik

C2

hakim32.ddns.net:2000

127.0.0.1:5552

Mutex

da2a3455f965bc0fe872e09e43abac66

Attributes
  • reg_key

    da2a3455f965bc0fe872e09e43abac66

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 29947dfd10f863113a0022a97cd82a814f3549163fc689ba7b48c31025696c50N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections