Overview

overview

10

Static

static

10

babv.exe

windows7-x64

10

babv.exe

windows10-2004-x64

8

babv.exe

windows10-ltsc_2021-x64

10

babv.exe

windows11-21h2-x64

8

Resubmissions

28/03/2025, 17:18

250328-vvcalayybz 10

28/03/2025, 17:17

250328-vtq3csyyax 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    babv.exe

  • Size

    29KB

  • MD5

    85e61aaafe402f7a04e793a53288a072

  • SHA1

    e8d088224025f54c58fa11e8b9835fa7dfd3b9ff

  • SHA256

    a7ae40544682a27bb1837c0c5d99f417bb4b8e8036e851529fe49a3d507a570b

  • SHA512

    cbfd7413fa3373e4c947c35b9605c1dade7159de0990f0961eef2bc4e2dc5e06b2e8cef974f9ada76951732a74d715c84d22e58c7dd1a841eab0e3096cc36511

  • SSDEEP

    384:tBs/hl7b1/JEI+GPWrb5hFEaemqD6CLeQTGBsbh0w4wlAokw9OhgOL1vYRGOZz/L:t47bXEI+GevhEsqdLe3BKh0p29SgR5d

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

195.88.218.126:1177

Mutex

5cd8f17f4086744065eb0992a09e05a2

Attributes
  • reg_key

    5cd8f17f4086744065eb0992a09e05a2

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • babv.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections