Overview

overview

10

Static

static

10

stub.exe

windows10-2004-x64

3

stub.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    260802-m7hn5s1fph_pw_infected.zip
  • Size 17KB
  • Sample260802-rap46sthqa
  • SHA256 22080da23f8a7e80c8a67bf14417f430bbffa34d99d85839839c19f468610a9d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
softtrojannjrat

Malware Config

Extracted

Family

  • njrat

Version

  • im523

Botnet

  • SOFT

C2

  • 45.84.227.157:5012

Mutex

  • 0ec846a435bf91138081ad39491b85bb

Attributes
  • reg_key

    0ec846a435bf91138081ad39491b85bb

  • splitter

    |'|'|

Signatures

  • Family: njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 260802-m7hn5s1fph_pw_infected.zip
    .zip 17KB
  • stub.exe
    .exe 37KB

260802-m7hn5s1fph_pw_infected.zip

  • SHA256 22080da23f8a7e80c8a67bf14417f430bbffa34d99d85839839c19f468610a9d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected