Njrat[.]rar | Triage™

General

Target
Njrat.rar
Size 14KB
Sample260913-p686tabd85
SHA256 ea07bf41c9de37edd21abb50d5045e8aa86176acf4ddca07f0d2b6bfb911e1b7
MD5 d9989639d6d5d9c4d0b99f420c19a3a2
SHA1 e01fe7606d98b06e3e7c766adcb9c941b74e5dde
SHA512 ae57733495fdd17d88c1fb5d9b791bb1e6d5fbe874430a0e9cb1561e0b1043ac811b47f9d15c63c0f7ccb2182b9a0271d652116c950fab2e8652a8033f820e49
SSDEEP 192:3qkqpAFNkwJ7bPWB0hvJuBlJ5esUZynRe/iyyiegaT10zpxtZeeB/+KgkDgQNZBc:arAFNkQqcwR9niIhT10tJeeB6k9fXs
TLSH
T1BD62C0C56E1F5E922C216AFB78AFF592F02B3F5C019D092123413B0DA253C7E5ED1A55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/server.exe

File Explorer

Njrat.rar

.rar 14KB
server.exe

.exe 32KB

Njrat.rar

SHA256 ea07bf41c9de37edd21abb50d5045e8aa86176acf4ddca07f0d2b6bfb911e1b7
MD5 d9989639d6d5d9c4d0b99f420c19a3a2
SHA1 e01fe7606d98b06e3e7c766adcb9c941b74e5dde
SHA512 ae57733495fdd17d88c1fb5d9b791bb1e6d5fbe874430a0e9cb1561e0b1043ac811b47f9d15c63c0f7ccb2182b9a0271d652116c950fab2e8652a8033f820e49
SSDEEP 192:3qkqpAFNkwJ7bPWB0hvJuBlJ5esUZynRe/iyyiegaT10zpxtZeeB/+KgkDgQNZBc:arAFNkQqcwR9niIhT10tJeeB6k9fXs
TLSH
T1BD62C0C56E1F5E922C216AFB78AFF592F02B3F5C019D092123413B0DA253C7E5ED1A55
MD5 SHA1 SHA512 SSDEEP TLSH

Password

1

server.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2c86db47e87ab597929a047c5b6c9d0d851ed10c954ac188c6191d1f24470725
MD5 70d8c83ebbc68e22f9b6ab62901508eb
SHA1 11ccaa6fc336bc13a8f6617546a7e17558dae059
SHA512 ff579ada91ceae541d032da8fa73691b7b0e9ce87da179e257f0c1e55f9953873a32dd64e0446478075edf1fdf81820f0e9874c9e162e8268ae89103c614ef89
SSDEEP 768:GBwN/ZVwBM0UcncbwndwkJIw3ccrfLTmr:9a6cc8G4Iw3cafHmr
TLSH
T1BCE2F94D73A48A23C6BE47B84E70954247F1814B5512EFAF8EC560DA1EA7BE41E00EF7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

1

Minor OS version

0

Major OS version

4

Entry point

39214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Njrat.rar

server.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Njrat.rar

server.exe

mscoree

dotnet