njRAT v8[.]5 %M[.]A[.]H-RAT%[.]exe

General

Target
njRAT v8.5 %M.A.H-RAT%.exe
Size 7.1MB
Sample261027-1yspmsgz8n
SHA256 9181bb7f074e3d9481b2d455dd99e308615b5b77aea756454a73daaa971b052b
MD5 bba85967f31bbbbec17ca3dfcb559465
SHA1 0b955ececfd5a16b5797772785ae8462280e2e66
SHA512 82d0f5aab9fd2c352e0bafe9de75395486162f4f3594c720b384b948227e442ab417a5946b82959306ae75a5d8835ae0695dd9041fbce8fd460c34224d615252
SSDEEP 98304:+eOOOGOCnzB1Iv1t6aIFJIhsQIHungNWToacNtPU5bDxt0Qodx/99Le6QkrYadSD:+eOOO1+zIv1t95rrG/u6QkI9M2
TLSH
T161767E30951F4D10E07A1EB0AE42D9B28EEB4C092655D29D98FDBA2CFFF8C42DD4691D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
njRAT v8.5 %M.A.H-RAT%.exe

File Explorer

njRAT v8.5 %M.A.H-RAT%.exe

.exe 7.1MB

njRAT v8.5 %M.A.H-RAT%.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 9181bb7f074e3d9481b2d455dd99e308615b5b77aea756454a73daaa971b052b
MD5 bba85967f31bbbbec17ca3dfcb559465
SHA1 0b955ececfd5a16b5797772785ae8462280e2e66
SHA512 82d0f5aab9fd2c352e0bafe9de75395486162f4f3594c720b384b948227e442ab417a5946b82959306ae75a5d8835ae0695dd9041fbce8fd460c34224d615252
SSDEEP 98304:+eOOOGOCnzB1Iv1t6aIFJIhsQIHungNWToacNtPU5bDxt0Qodx/99Le6QkrYadSD:+eOOO1+zIv1t95rrG/u6QkI9M2
TLSH
T161767E30951F4D10E07A1EB0AE42D9B28EEB4C092655D29D98FDBA2CFFF8C42DD4691D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7397150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Mr-Abu Hani\Desktop\RAR\SRC - NjRAT 0.7D\NjRAT\obj\Debug\NjRat 0.7D.pdb

njRAT v8.5 %M.A.H-RAT%.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

njRAT v8.5 %M.A.H-RAT%.exe

mscoree

dotnet