General

  • Target
    32قث.rar
  • Size 31KB
  • Sample260922-txchpsyekf
  • SHA256 606d6c2cf9c068f70f0308385f3348d82224b24e31bf1d3c0aff25a1ad27e871
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7d

Botnet
  • HacKed

C2
  • hakim32.ddns.net:2000

  • 32.tcp.cpolar.top:14206

Mutex
  • 07cc3fe186cc09bd0882c38da8f43377

Attributes
  • reg_key

    07cc3fe186cc09bd0882c38da8f43377

  • splitter

    |'|'|

Signatures

  • Family: njRAT/Bladabindi

    Widely used RAT written in .NET.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 32قث.rar
    .rar 31KB
  • 32قث/3بيبس.exe
    .exe 93KB

32قث.rar

  • SHA256 606d6c2cf9c068f70f0308385f3348d82224b24e31bf1d3c0aff25a1ad27e871
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
1