General

  • Target
    essencial.rar
  • Size 12KB
  • Sample261021-2j57vsgf35
  • SHA256 b1dd6ed64b1d05e4b0080d73160e3839567e2e72e1c29b7f1b6bebef57147e2f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.6.4

Botnet
  • HacKed

C2
  • dani776522131-57252.portmap.host:57252

Mutex
  • 8515eb34d8f9de5af815466e9715b3e5

Attributes
  • reg_key

    8515eb34d8f9de5af815466e9715b3e5

  • splitter

    |'|'|

Signatures

  • Family: njRAT/Bladabindi

    Widely used RAT written in .NET.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • essencial.rar
    .rar 12KB
  • essencial.exe
    .exe 29KB

essencial.rar

  • SHA256 b1dd6ed64b1d05e4b0080d73160e3839567e2e72e1c29b7f1b6bebef57147e2f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
essencial