Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fac004943c463cf3a62bee95962beea85e0c1b9f5e4ca491873c2d5d6f681b86N.exe

  • Size

    23KB

  • MD5

    19a8710cbb5a9b606617c48c2e528080

  • SHA1

    c2d291b5fa122057a05cb67f76fc93b676615f90

  • SHA256

    fac004943c463cf3a62bee95962beea85e0c1b9f5e4ca491873c2d5d6f681b86

  • SHA512

    c10b64057dc8452605a3f574849b058c775ee28161c1bf902950cfe9d4c7fcb1e67b5d19791b5d4f31a9257b84725f71234a399f5b6214b23745a07b76acfeb8

  • SSDEEP

    384:d/KPBfWhERYoBX16XuIeMHNw6Tg1Y6eeTFmRvR6JZlbw8hqIusZzZN4:u44P1InRpcnuB

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

crypter par netrefleactor utube

C2

riad-imss.ddns.net:5552

Mutex

3292a39595bf286cc7808b134dcfcbdd

Attributes
  • reg_key

    3292a39595bf286cc7808b134dcfcbdd

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fac004943c463cf3a62bee95962beea85e0c1b9f5e4ca491873c2d5d6f681b86N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections