NjRAT_0.7d.zip.zip
- SHA256 918c3c9a9cd2f1c949ad18673a0ecf5fed9a2d77bc597f42cf2430097b977fee
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NjRAT_0.7d.zip
Resource
win10v2004-20260911-es
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NjRAT_0.7d.zip
Resource
win11ltsc2024-20260911-es
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target NjRAT_0.7d.zip.zip
- Size 14.2MB
- Sample261113-1psy2sss7n
- SHA256 918c3c9a9cd2f1c949ad18673a0ecf5fed9a2d77bc597f42cf2430097b977fee
- MD5 cb510624a6673251aff8afa80948f52c
- SHA1 ead5ba02202a03d4fcb600d1a68e8e23fac4d1ff
- SHA512 6dd237dfb4eccd73d2d69a316d58e9ada338503eaefe041c36bd29ddb639c2950e093c4ea74fa7e6022a3dac61c8933690405adc0e52e065483781180634906b
- SSDEEP 393216:EwePMVGCtd4G0FIkm2L9Bl8DmBikouW4oZA0QFnjaxN:zeE8CSN9Bl8CKuW4LVaxN
- TLSH T153E633A1BD7E06E19C358176C65E45A87AA1CE7CFCCE0E69941D61438FCF8CC8E0691B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 19 IoCs
Checks for missing Authenticode signature.
resource unpack002/APP - NjRat 0.7D Moded/NjRat 0.7D.exe unpack002/APP - NjRat 0.7D Moded/Plugin/cam.dll unpack002/APP - NjRat 0.7D Moded/Plugin/ch.dll unpack002/APP - NjRat 0.7D Moded/Plugin/mic.dll unpack002/APP - NjRat 0.7D Moded/Plugin/plg.dll unpack002/APP - NjRat 0.7D Moded/Plugin/pw.dll unpack002/APP - NjRat 0.7D Moded/Plugin/sc2.dll unpack002/APP - NjRat 0.7D Moded/WinMM.Net.dll unpack002/SRC - NjRAT 0.7D/NjRAT/Referencias/WinMM.Net.dll unpack002/SRC - NjRAT 0.7D/NjRAT/Resources/Res.exe unpack002/SRC - NjRAT 0.7D/NjRAT/Resources/dotNET_Reactor.exe unpack002/SRC - NjRAT 0.7D/NjRAT/Resources/mpress.exe unpack002/SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/cam.dll unpack002/SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/ch.dll unpack002/SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/mic.dll unpack002/SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/plg.dll unpack002/SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/pw.dll unpack002/SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/sc2.dll unpack002/SRC - NjRAT 0.7D/NjRAT/xbin/WinMM.Net.dll
File Explorer
-
NjRAT_0.7d.zip.zip.zip 14.2MB
-
NjRAT_0.7d.zip.zip 14.2MB
-
APP - NjRat 0.7D Moded/GeoIP.dat1.1MB
-
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Atom.ico190KB
-
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Blender.ico179KB
-
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Firewall-config.ico177KB
-
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Nvidia-settings.ico177KB
-
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Utilities-system-monitor.ico176KB
-
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Web-slack.ico182KB
-
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Access.ico162KB
-
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Excel.ico161KB
-
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-InfoPath.ico160KB
-
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Lync.ico161KB
-
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Office.ico160KB
-
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Outlook.ico162KB
-
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-PowerPoint.ico161KB
-
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Word.ico161KB
-
APP - NjRat 0.7D Moded/Icons/Ccard3dev-Dynamic-Yosemite-Numbers.ico163KB
-
APP - NjRat 0.7D Moded/Icons/Chrisbanks2-Cold-Fusion-Hd-Radar.ico158KB
-
APP - NjRat 0.7D Moded/Icons/Cornmanthe3rd-Plex-Android-App-drawer.ico73KB
-
APP - NjRat 0.7D Moded/Icons/Cornmanthe3rd-Plex-Android-Baconreader.ico73KB
-
APP - NjRat 0.7D Moded/Icons/Cornmanthe3rd-Plex-Android-Ebay.ico73KB
-
APP - NjRat 0.7D Moded/Icons/Graphicloads-Colorful-Long-Shadow-Analytics.ico163KB
-
APP - NjRat 0.7D Moded/Icons/Graphicloads-Colorful-Long-Shadow-Cloud.ico164KB
-
APP - NjRat 0.7D Moded/Icons/Graphicloads-Colorful-Long-Shadow-Favourite.ico165KB
-
APP - NjRat 0.7D Moded/Icons/Graphicloads-Colorful-Long-Shadow-Restaurant.ico165KB
-
APP - NjRat 0.7D Moded/Icons/Graphicloads-Polygon-Cart-add.ico166KB
-
APP - NjRat 0.7D Moded/Icons/Graphicloads-Seo-Services-Pay-per-click.ico166KB
-
APP - NjRat 0.7D Moded/Icons/Harwen-Red-Christmas-Home.ico223KB
-
APP - NjRat 0.7D Moded/Icons/Harwen-V-Day-Valentines-Day-Honey.ico422KB
-
APP - NjRat 0.7D Moded/Icons/Harwen-V-Day-Valentines-Day-Present.ico422KB
-
APP - NjRat 0.7D Moded/Icons/Hopstarter-Sleek-Xp-Basic-Money.ico290KB
-
APP - NjRat 0.7D Moded/Icons/Hopstarter-Sleek-Xp-Software-Opera.ico251KB
-
APP - NjRat 0.7D Moded/Icons/Iconka-St-Patricks-Day-Hat-tophat.ico173KB
-
APP - NjRat 0.7D Moded/Icons/Icons-Land-Weather-Moon-Phase-Full.ico363KB
-
APP - NjRat 0.7D Moded/Icons/Icons-Land-Weather-Sleet.ico363KB
-
APP - NjRat 0.7D Moded/Icons/Icons8-Windows-8-Logos-Xbox.ico162KB
-
APP - NjRat 0.7D Moded/Icons/Icons8-Windows-8-Security-Security-Checked.ico161KB
-
APP - NjRat 0.7D Moded/Icons/Iconshock-Trendy-Guys-Andrew.ico139KB
-
APP - NjRat 0.7D Moded/Icons/Indeepop-Crazy-Crown.ico83KB
-
APP - NjRat 0.7D Moded/Icons/Johanchalibert-Mac-Osx-Yosemite-Safari.ico215KB
-
APP - NjRat 0.7D Moded/Icons/Kevin-Thompson-Love-And-Breakup-Love-box.ico182KB
-
APP - NjRat 0.7D Moded/Icons/Paddy-Web20rigami-Firefox.ico204KB
-
APP - NjRat 0.7D Moded/Icons/Petalart-Business-Cloud-upload.ico33KB
-
APP - NjRat 0.7D Moded/Icons/Ph03nyx-Super-Mario-Mushroom-Super.ico134KB
-
APP - NjRat 0.7D Moded/Icons/Photoshopedia-Xedia-Firefox.ico422KB
-
APP - NjRat 0.7D Moded/Icons/Tooschee-Misc-Present.ico185KB
-
APP - NjRat 0.7D Moded/Icons/Tooschee-Misc-Sync.ico187KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Acrobat-Reader.ico197KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Chrome.ico226KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Dreamviewer.ico215KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Facebook.ico198KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Firefox.ico239KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-ITunes.ico227KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Illustrator.ico208KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Photoshop.ico214KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Quicktime.ico235KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Safari.ico231KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Skype.ico228KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Thunderbird.ico227KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Utorrent.ico223KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Vlc.ico204KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Winamp.ico206KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Windows-Media-Player.ico208KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Yahoo.ico223KB
-
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Youtube.ico207KB
-
APP - NjRat 0.7D Moded/NjRat 0.7D.exe.exe 8.5MB
-
APP - NjRat 0.7D Moded/Plugin/cam.dll.dll 99KB
-
APP - NjRat 0.7D Moded/Plugin/ch.dll.dll 45KB
-
APP - NjRat 0.7D Moded/Plugin/mic.dll.dll 77KB
-
APP - NjRat 0.7D Moded/Plugin/plg.dll.dll 65KB
-
APP - NjRat 0.7D Moded/Plugin/pw.dll.dll 284KB
-
APP - NjRat 0.7D Moded/Plugin/sc2.dll.dll 46KB
-
APP - NjRat 0.7D Moded/Stub/Stub.il338KB
-
APP - NjRat 0.7D Moded/Stub/Stub.manifest.xml 487B
-
APP - NjRat 0.7D Moded/WinMM.Net.dll.dll 43KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/About.Designer.vb3KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/About.resx.vbs 262KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/About.vb400B
-
SRC - NjRAT 0.7D/NjRAT/Forms/Asemb.designer.vb16KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Asemb.resx.vbs 295KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Asemb.vb.vbs 7KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Builder.Designer.vb19KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Builder.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Builder.vb.vbs 9KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Cam.Designer.vb7KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Cam.resx.vbs 6KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Cam.vb.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Chat.Designer.vb3KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Chat.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Chat.vb.vbs 4KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/DW.Designer.vb4KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/DW.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/DW.vb3KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/FURL.Designer.vb5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/FURL.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/FURL.vb1KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Form1.Designer.vb47KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Form1.resx.vbs 1.1MB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Form1.vb.vbs 27KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/FromLink.Designer.vb4KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/FromLink.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/FromLink.vb741B
-
SRC - NjRAT 0.7D/NjRAT/Forms/Manager.Designer.vb55KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Manager.resx.vbs 70KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Manager.vb.vbs 50KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Mic.Designer.vb5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Mic.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Mic.vb.vbs 3KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Mynoip.Designer.vb8KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Mynoip.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Mynoip.vb.vbs 4KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Note.Designer.vb3KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Note.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Note.vb1KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Pass.Designer.vb12KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Pass.resx.vbs 34KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/Pass.vb.vbs 10KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/RGv.Designer.vb6KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/RGv.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/RGv.vb.vbs 1KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/STNG.Designer.vb16KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/STNG.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/STNG.vb1KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/kl.Designer.vb6KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/kl.resx.vbs 6KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/kl.vb2KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/notf.Designer.vb2KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/notf.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/notf.vb.vbs 6KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/port.Designer.vb4KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/port.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/port.vb.vbs 1KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/sc.Designer.vb8KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/sc.resx.vbs 6KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/sc.vb.vbs 11KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/script.Designer.vb4KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/script.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/script.vb688B
-
SRC - NjRAT 0.7D/NjRAT/Forms/up.Designer.vb5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/up.resx.vbs 5KB
-
SRC - NjRAT 0.7D/NjRAT/Forms/up.vb2KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/ApplicationEvents.vb3B
-
SRC - NjRAT 0.7D/NjRAT/Modules/Class6.vb.vbs 8KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/Class7.vb.vbs 98KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/Client.vb.vbs 17KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/GClass12.vb380B
-
SRC - NjRAT 0.7D/NjRAT/Modules/GClass2.vb.vbs 954B
-
SRC - NjRAT 0.7D/NjRAT/Modules/GClass3.vb.vbs 29KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/GClass4.vb.vbs 501B
-
SRC - NjRAT 0.7D/NjRAT/Modules/GClass5.vb.vbs 2KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/GClass6.vb1KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/GClass7.vb.vbs 785B
-
SRC - NjRAT 0.7D/NjRAT/Modules/GClass8.vb.vbs 4KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/GClass9.vb.vbs 16KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/IcoCH.vb.vbs 9KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/IconN.vb.vbs 7KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/L1.vb.vbs 12KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/Pp1.vb.vbs 4KB
-
SRC - NjRAT 0.7D/NjRAT/Modules/SK.vb.vbs 3KB
-
SRC - NjRAT 0.7D/NjRAT/My Project/Application.Designer.vb1KB
-
SRC - NjRAT 0.7D/NjRAT/My Project/Application.myapp510B
-
SRC - NjRAT 0.7D/NjRAT/My Project/AssemblyInfo.vb1KB
-
SRC - NjRAT 0.7D/NjRAT/My Project/Resources.Designer.vb.vbs 8KB
-
SRC - NjRAT 0.7D/NjRAT/My Project/Resources.resx.vbs 9KB
-
SRC - NjRAT 0.7D/NjRAT/My Project/Settings.Designer.vb.vbs 2KB
-
SRC - NjRAT 0.7D/NjRAT/My Project/Settings.settings279B
-
SRC - NjRAT 0.7D/NjRAT/My Project/app.manifest2KB
-
SRC - NjRAT 0.7D/NjRAT/NJRAT 2.vshost.exe.config.xml 1KB
-
SRC - NjRAT 0.7D/NjRAT/NJRAT.exe.config.xml 1KB
-
SRC - NjRAT 0.7D/NjRAT/NJRAT.pdb411KB
-
SRC - NjRAT 0.7D/NjRAT/NJRAT.v11.suo42KB
-
SRC - NjRAT 0.7D/NjRAT/NjRat.sln927B
-
SRC - NjRAT 0.7D/NjRAT/NjRat.vbproj15KB
-
SRC - NjRAT 0.7D/NjRAT/Referencias/WinMM.Net.dll.dll 43KB
-
SRC - NjRAT 0.7D/NjRAT/Resources/JPEG.png8KB
-
SRC - NjRAT 0.7D/NjRAT/Resources/Res.exe.exe 997KB
-
SRC - NjRAT 0.7D/NjRAT/Resources/bullet_arrow_down.png1KB
-
SRC - NjRAT 0.7D/NjRAT/Resources/bullet_arrow_up.png1KB
-
SRC - NjRAT 0.7D/NjRAT/Resources/control_pause_blue.bmp.png 750B
-
SRC - NjRAT 0.7D/NjRAT/Resources/control_play_blue.bmp.png 744B
-
SRC - NjRAT 0.7D/NjRAT/Resources/dotNET_Reactor.exe.exe 5.9MB
-
SRC - NjRAT 0.7D/NjRAT/Resources/icon.Ico31KB
-
SRC - NjRAT 0.7D/NjRAT/Resources/mpress.exe.exe 101KB
-
SRC - NjRAT 0.7D/NjRAT/Resources/mynoip_logo.png.png 233B
-
SRC - NjRAT 0.7D/NjRAT/Resources/noip_logo.png.png 12KB
-
SRC - NjRAT 0.7D/NjRAT/app.config.xml 1KB
-
SRC - NjRAT 0.7D/NjRAT/icon.Ico31KB
-
SRC - NjRAT 0.7D/NjRAT/xbin/GeoIP.dat1.1MB
-
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/cam.dll.dll 99KB
-
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/ch.dll.dll 45KB
-
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/mic.dll.dll 77KB
-
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/plg.dll.dll 65KB
-
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/pw.dll.dll 284KB
-
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/sc2.dll.dll 46KB
-
SRC - NjRAT 0.7D/NjRAT/xbin/Stub/Stub.il338KB
-
SRC - NjRAT 0.7D/NjRAT/xbin/Stub/Stub.manifest.xml 487B
-
SRC - NjRAT 0.7D/NjRAT/xbin/WinMM.Net.dll.dll 43KB
-
SRC - NjRAT 0.7D/STUB/j.sln843B
-
SRC - NjRAT 0.7D/STUB/j.suo13KB
-
SRC - NjRAT 0.7D/STUB/j.vbproj1KB
-
SRC - NjRAT 0.7D/STUB/j/A.vb202B
-
SRC - NjRAT 0.7D/STUB/j/AntiProcess.vb3KB
-
SRC - NjRAT 0.7D/STUB/j/OK.vb.vbs 54KB
-
SRC - NjRAT 0.7D/STUB/j/kl.vb.vbs 7KB
NjRAT_0.7d.zip
- SHA256 d1b368392d8143ba7038493570f34c994018cc46855918e3022085de32f6b653
- MD5 c35fdeebdede1d3a555e05209e61bb73
- SHA1 2410fab8d3c149e7c4d31096fe743d23d6ed76cc
- SHA512 c351dcfdd589e227ae7d735eda98a2c4feea7e6ddbb8017122dba8cf9c6bb92ae401ccf5a2389657551f79279ce07f1b4db8b43ff8a4136c35c26f57dd37b67b
- SSDEEP 196608:7k2nPh3U2iCbN1Kl7pDz6lDM6M+YDiusunQT2uhQxDJJMYtr7WIke1J8Z+y8ZQOG:pnPMCh6BWlIDBZ2iDJbtr7PkbZ+HF/+
- TLSH T1E4E63336508F5F5ED52A0F7298DEC5885FCF0307FE32D8AA45A667A965C3A32F584803
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected
APP - NjRat 0.7D Moded/GeoIP.dat
- SHA256 b4bfd1ebc50f0eaab3d3f4c2152feae7aa8efad380b85064153a6bfd006c6210
- MD5 a0a228c187329ad148f33c81ddb430bb
- SHA1 d70ec83d1b15b3156df73802dd1bec024b1b9346
- SHA512 0fe0a62c07f7ade0e6bfac8843c13c055369177935d801488a993bc4bcdb9da220ba1b37df2027dab8af7c15e5cf00b3e8f223b12165d8a1b0b9c30dc9939332
- SSDEEP 24576:WUH7rp/TXKHJBjsN0wjAu6e3akVX7k+k7bKnz+AHxOxaz+hnV647KyMLh:WUH3p/TKpBjs0b+akV4+C0axaz+ZVL7o
- TLSH T129358C22FF0696DBA9413D9EBD189EDC18148DB9FD071339625E379C60B8374CCC26A6
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Atom.ico
- SHA256 91c7291eb6b9acb6913ad7f2fc7baed35b90b7ede64ca730ca2d6566b6454671
- MD5 1d79405f7e023fae9cafeeb11c24afa3
- SHA1 c6b53636636dc6e95f570d1e6ce8b39f8096875a
- SHA512 768c5c6b6e0f4ffe308bec00ee67858ad1f7795489e4f8da9e428a249dd54ea529b0c9f47ed98ee1ef0faf86991e0909cb648b536efe92df5edd16295c0356a3
- SSDEEP 3072:m1pCyC1eaGNJRj3jHHHHHHHHHHHHHHHHHHHHHHHHAgcciBjsqdrrFrrrrrrhrmEi:WMe1X3jHHHHHHHHHHHHHHHHHHHHHHHHv
- TLSH T1C5141B03B2113B0BC4650877425143A819FAEC7FAF6F366750A0772F5D7E8A0E63AB85
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Blender.ico
- SHA256 2c75b081b7f6560e68ccdda10a7564e56b5c11eb94314a0a67a3d1c9b5ad86c7
- MD5 c492875b64c0fffae444a3e083399c1a
- SHA1 82df84680c877bd72355f6f94e779a108b7eb734
- SHA512 b444fe46c6f644965eb73fa9c2e9016b2f0a6e4cba26c49e265096528f87056c28ae3a7c4f6c79c8c2c1c0cc7ed30167c03b7899687b535ab74009695dc2273a
- SSDEEP 1536:u/SaS8PiHN/ejL4m4gx4EC7nGwARmxeEq9HHEqdIERM3RW2:ua84/AD4ihCLGHLEq9HHD+U2
- TLSH T1CC04C72E8B89CBC3F4CC6EF15A2245B153FF6C46146E02978A6179B658627C213DF09F
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Firewall-config.ico
- SHA256 62bf6131f689a912778973368f588e057d33522c26b4e45f2630444eac70ef29
- MD5 1b532a29e8a448fcd9741839571e2d63
- SHA1 0b2c1cf2b039a13e7b2203c77d14bef8045ea83f
- SHA512 68cca16910623b788d729cf2b2d7275c7dd2213236ea9c72f24bc288cca2c3c2731df038df8acacec8efce5d35b52331d6c2116d892b56c804c42cec3164aa22
- SSDEEP 1536:IrbbCvEqcaw4+cxQbvlJCpELLL7LLLBSLLgRwRRdD75QesUEJeRRu3tCm5ULCeZt:ubiF2cxiJC8gEJeRR2CvVsNK
- TLSH T1D70465EBFF5D9E14D0E5EEF64C22D2B22B985DD11F3846C1DD4D74F20AE999B6820022
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Nvidia-settings.ico
- SHA256 ab234c4921a836d62fe083b34620f9d0cbbcaa386cb60a7951fde7761b1fdfd0
- MD5 6c8373254011716ec00c937bc89c3f6e
- SHA1 3afda47954cab6a35dbfb80d6a9f81d36eab27b2
- SHA512 303b864c0e21fc13dda58cc8f72bdc9662b8240c14125a3c94efd8b5968f66d7bbbc9a9b6850b373734f05fdcad7fde6bd4c531648dd9206b1bc36245b99fd0f
- SSDEEP 3072:5sIThzA8888V888888f88888888888888888888888888xFQ1QL+M//22g8k:KCzA8888V888888f888888888888888Z
- TLSH T1AF040E6BE76F5C01D2309AFEE903BB951DEC92322E2CF6D589614DB6B8CC2417947093
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Utilities-system-monitor.ico
- SHA256 54020401fb9a922ac6d87ce98e7faff4afa8a800194d1f8c721c699405617810
- MD5 d6b403b8948f016df7a27477572fda7e
- SHA1 a72140a170e688233dadee4a79a9ffd611f25cb0
- SHA512 6c73b1b0037c2824fed07cae78913133eca03944826ebeac848a9c74075c90642835b7d30cb33f887c7bcc2df1def84c319807fcbfff1f765575d7651e2f885a
- SSDEEP 1536:fTNHrn7KXuds4kpESkDhGL79DY6SGXoGniQQQ1fZTK:RLnBUQoVYlMiQQQT2
- TLSH T1B60495142EC0FD49E66CF07411B0CA978AEF9A5D0623C561DEBAFD1535ADFCE2EA1102
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Bokehlicia-Captiva-Web-slack.ico
- SHA256 535f4ee53742c0d07f696972270332c425aa248a961be5cc5ef1211b6d31a548
- MD5 5ebe5bd94a99f8103cfa7ca18f60feff
- SHA1 698da213deb81dbd367ecb7bfdb4a7e06c263dd4
- SHA512 d139a838ee9766697ce3cc9af66918f283a9f2b8e7bd8e571a4af6f66a926b3eaedcfc84ae20e1c2215c85e41db261f32e1e30a541caf78f6c00c8fcefe0ccdd
- SSDEEP 3072:u2HxZyjPRld3mMSp9S4sBxK7sf9HQ92lxfjd7AOi/OplEu1E0YRWLHO51:u6yzRld3up9SRBU7s1HQEf7AOi/OpuuC
- TLSH T1B104AC7C66F49782C3BC25709BA3853559D06E78EEE5D30BD0F09C16A903DCE2A4668F
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Access.ico
- SHA256 b4f6e0388a17cca2edf91035e663b416351fa89e0cd0d1ac226f058438c36f9d
- MD5 2f03b739995589a73d0a880b3a4e1c24
- SHA1 085da1ad0e017c2ce52668d18e3daa849b50ae69
- SHA512 08159f0e084023e1cf5802bd5bd5b0abac5168a25ffe3a87e6af0def839a1cc3e35ccdd72dc75df61eff7fb711d8481fee38b1ed444e38a82432f72ad5b1cdee
- SSDEEP 384:CBJJqh7rWQehcoQ7mCJnrJJJChi5JtF8884nUx88888x0sabfszx40:EJJIaeoQ7JnrJJJC2888l888886Xi
- TLSH T1ECF3DFA6DB6E4F65D1552B728C7FA979F9D29F0832B0B7A4489434C1E0FCA8210E30CD
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Excel.ico
- SHA256 89e8a0214f242e7a5321dd5bb0f6c11279edc545a994c6633938d1a5ca72bae4
- MD5 6288e3bafe5576eaac15893ce3ed9359
- SHA1 1f5b46cbde606da717ed6c912a407608b6b2e384
- SHA512 3e4121b6df2f812628fc945c5635e869d71ffc12dcd801a8bd5432ba38ea6bbb34766a0db7a6f3a29a4cf3536970366077c9c057f57d2fd226740f823c3858a2
- SSDEEP 384:v0cvejVBjN4IXQxxkSlSlSlSlSlKlfalfalfalfalfalfalfalfalfalKlSlSDKg:vbvuvFZtj
- TLSH T1C8F3C823B07CD5E6F89C3DF45A0897256AB52E924238F097E91FBED6E8B3623C1041D5
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-InfoPath.ico
- SHA256 81eb99f8cede5ce56236c477c4e53981f4dab77a0efaa605c1d9179257cba360
- MD5 02eb592fc17f6ea0719d0d6b18588273
- SHA1 61c3de6e3055c3ce419a3b664e93919e9206b924
- SHA512 db5d9b7f51fbaaff95b6be678e4bc1dd889f8e90aaccdc009b3febd3683b7ee56064c89d8344c78cc140402aff0b6e40356ff05362545dfcd33a7e98bb48cdc6
- SSDEEP 96:aYtcJRqRuTb3HuCfXoo++yTzzLLjDbBkRRRaHHlUaaaaq444444444444444444h:aYtczqs7uom1Mc/rTP
- TLSH T1F9F371677ADF1BD4F0925FF2D891B9FC66E4AC2C1284849BB645FE3B24B1B20020552F
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Lync.ico
- SHA256 cc3941ea46141d642f10adff18b1645126ee70db72b64fc949fee742c48a0a66
- MD5 414c3734aa12057926c20fdda89b4409
- SHA1 481adde3a79e17d1a28e0459e35a4c4a5a930d63
- SHA512 062ca8ed518473c4dccfdb0e337051b1ea6d0438625670180e86e7a9dc82e3b0950cf5d2b8790ca6fa4ee2398eb1eb9f55162fe066a7f9e5186e0eeb2e234805
- SSDEEP 192:5vdwI9nlQw877adqvwO2dPnOWBukJGrvj0nLt8nDO8:vlQwu7aymniPTonJn8
- TLSH T17FF3F009C891E8D5FC64BAFC28227750CAB65C51896D4CD363B5BBEEC2B15807F0F989
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Office.ico
- SHA256 9b2f9abef3f184617658e45b6afca7bff4e162fee75f1d574e0ed99a78f2a60b
- MD5 da665d8230c75cf09aa0d4cb59f9e217
- SHA1 d675e57aacdfdbb58600eae85dc2d8b0ec18be41
- SHA512 a2713389414f06d1dc49852b8ac227eb7324dd5f84833e1c8867a8244cb4db5cc4cd9528ff064561d68736f19cce3baf842f3e930ca9e0b84a28029153dbc5be
- SSDEEP 192:mhJETQEj4y5ADduV03PCCiSl3joll5n0pM9p4YckGkZJHLyV4KwV5CQ:mhJuX4y5AD3ocVdwV51
- TLSH T1B3F382A4723090B6D89C5EB53B54FAAE61697C28C8834C9671D27FDF7BF0A30A700275
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Outlook.ico
- SHA256 211db05d6fd99f4726cf6265c5fd0ebb242994b5865a02702d31309b9aa2fcaf
- MD5 92ad3018b5564fd60f49579442c5bca9
- SHA1 a6c84103de585687b474ff8c472ed456444345d4
- SHA512 4bb16893527ced3c297c6ce35a8cb7df20d0256650b13f7618fae5c35af9ab3f62e5397418e2799664bf1dba1ac2e5eafb04965891e693a7f6d53b8b93e494e9
- SSDEEP 192:CavdNWabOCByj6gORJeEwwweQII4M/ATRZCwkvXOhm94glxVkqw0WtqoO4l+j:tFBTgORJeEwwwDIrJTTCwmXOwTlXkxG
- TLSH T1DEF3C648C855E9E8FC64B2FC69017B54C6B65C40CA9D48E32BB47FFED2712913E0B949
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-PowerPoint.ico
- SHA256 c124af4531d16a23d220a335f8927002382ecb23ba6205e78508ccdbcd2a7f01
- MD5 26a6129b38f3d0b70db220b329e7d970
- SHA1 95f73a1c7ea6785567a923b7f41a84636ad53c02
- SHA512 144b3a4516610f5f983727b348fd254d9004965d715186cc1a687e8eb84cfd3329f8b1dfe197a9922ba29b265f713eba90c724112f99f405c93122b0e952fddf
- SSDEEP 192:JaaaTMSy9eFh+qp3vNLoabUE1faaa95OL52/KZ9:z9Ch+qBvSYq5w5X
- TLSH T1ACF32E8CBC58844CEEA9EA71191EF473FD2A7FCABA4C6B90C1507FD63972161064D839
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Carlosjj-Microsoft-Office-2013-Word.ico
- SHA256 607e17a53524f457be2fc5eee62791fa110ce2a57397cdcab8a12e53acc4ad0d
- MD5 213e5e6956287cf4da074ae3dbbbe4ea
- SHA1 8a6d88204c3b08a11aa25e0c6fb3700b5be96f67
- SHA512 44e1ae57973f27be2c4ddae36cd1be0b2ff642e713d50af1b939564e2f6ef0818526a596cc04828069730b322e73e5b65686cd88f3c8c8a67e591153f8501a43
- SSDEEP 384:Mmwww6BKpwWowwwl6ES0JXtZhVm13j2tSHPWcDeaYT:MR6ES0JXtZhVm13j2tSHPWcSaYT
- TLSH T125F33192EBB6EF74CE24093F8344B3399F2E1ED181F27D89314DB1642EB9D01D1446AA
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Ccard3dev-Dynamic-Yosemite-Numbers.ico
- SHA256 277da5044afd4d0e2ada605022d208691fa088013a605fd9cfa6caa2b842279e
- MD5 56776ef588b6e393487f4336729da61c
- SHA1 962caf71a160208de5b68619a1738fc7c2e4c385
- SHA512 48a1b718bee99fa1e113211ee853e3ef4afe77d31583a02d776c45ba2e51690ee4d839cc1dcd0e9613e15885eec5d9f3f45794dca229b7e9e9becbb9bfe3e684
- SSDEEP 384:cJntFzgFNlzEz2/HGO1eubgvs1gxFLEAOtR9CCzCCLCCjCC4eQ2LIo:c1Il4+HJ1xgvKgxFnOj6eAo
- TLSH T10FF3D544F25AA072FD385A3A15D7B650CD5CACE089698891A3BD271F3F772D18B0E8CD
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Chrisbanks2-Cold-Fusion-Hd-Radar.ico
- SHA256 59ddd09041b697eb35979cdc52a5e15c82fbb124efc12479276c03a22216d6ba
- MD5 f1b634a8785120cce35948a341fb5514
- SHA1 0e5c699dfdb330f8a3e6709ff23c21e976729e49
- SHA512 a2860938b6a9ff294b527b9681a7877c9e7b6067bbee21428c4461fccf5f3f82065c3e62be18bf5e15815f81ead37771a1bbb0a00e1db83bf75044c90f885889
- SSDEEP 1536:T8YPUroe7pyzV74PFL1tBCxZaO5H59JBDSaubXCPGQ3B/4iiMLopa98FYm7pEBD8:T1Mr8b4bSPGEYmf34Rs7+SE
- TLSH T15EF363950D40CD1AC36843F0BADBFA6066F7ABB14DC20511E23E1F69F42568CB967B78
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Cornmanthe3rd-Plex-Android-App-drawer.ico
- SHA256 8915eed20d151827bd0e294a45442d774fcc337a46bd1e2f8c5c4557a4ab4d17
- MD5 43db64aa1471ac46d71832e1406f7013
- SHA1 8beccc99390cc1c03b0466a29836b6ceb0c91b97
- SHA512 39d7b4485005d9b1b1bf99e10a98da668c889e07da31d08ca824a94c5f09284869863d69cdd5f4aa6eb4ec7aeb49d1b01a00a9135ba3fbf3bc4dd48e15949e10
- SSDEEP 1536:KM8Roojoo8oooo1yoooo1goooo1Iooooo1Mooooo1aoooo1fTooo1poo11oo1ehw:9z
- TLSH T13B73EDAD16FF5396C1C39132DA8A40655CE85D1FFC5394B3FAA9337838768E00B1D86A
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Cornmanthe3rd-Plex-Android-Baconreader.ico
- SHA256 44409f5824e5b46c842e0f21a4a80f32668745cec801a166b537c31bdc2c6ed5
- MD5 5e743319959de11e2f4bdbb44c84ae82
- SHA1 60e394afb18b4680b07289cdf6d91b5f701db841
- SHA512 632875640eb882708225ac416593382abd27eb8324196eb2e49b0dfed43862fe06429696c7748044acf645ba108ff9e0316d75057e7de138da5dba3523f221c4
- SSDEEP 768:HoNnGSpeu2Xvvvvvvvvvvvvvvvvvvv+8pcz:IRGSpaGccz
- TLSH T1B073D91280FF0830F5F6B470166B95564A0A179FEA0C50A5255CBF1EB27AB0E177FECA
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Cornmanthe3rd-Plex-Android-Ebay.ico
- SHA256 4c0fc122396f38b85184e7b3f93e6c0147809a2577d3d7f49bb0aa4ee62d7921
- MD5 57d3350b8d9853c1e15142eca5e1b46c
- SHA1 1b1f1ae98d72a1955083998ac8725ca64f81bf50
- SHA512 1415cfa5a41ce69b920490eededa6953612d2f59657c9949f4e4493dc7c18dbe25cab840620f1e9d1461d08d817445947ec7f01d8df13e5f16fda9c93643423c
- SSDEEP 384:ZuzQKz0Ch5to7Cdx/NiV7+nCZQomscpF:szQKz0RprQofE
- TLSH T11E7362C42DAD059DFCE263F9C9856D9022333ADCD5F48A41B0832EBFF6666714285B78
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Graphicloads-Colorful-Long-Shadow-Analytics.ico
- SHA256 41fe2796815a1345a24529ee67604452541ef2b01fa14dd646ac3b3d411915d2
- MD5 16a0318b9c21fc7937e758f375f6bee2
- SHA1 d58c8d6b43387dcd4b66e28be03500b1563e4bc4
- SHA512 4930ae7fcfbba42784228837ef3f5f35b8a8a4df1559305300688daddb6cedb765247d43bddfe8d3efc27e8081d42d4ba2265d9c21b1a3797bd2b9b389b25022
- SSDEEP 768:Lwcvt1yXNN6SMJNwwON8u2NeAVXk18EjcT+MZa:Lwc11yXNN6SMJNwwOf2Ne8ygiMQ
- TLSH T188F3EF0019C712B8EE7AE87B2C55427FF6054983BA722537654D2271FBFC84BC7A6932
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Graphicloads-Colorful-Long-Shadow-Cloud.ico
- SHA256 b86da228efa3655f7013e7aa03427ce63ffc8657c9af526016b03c714f009436
- MD5 9d914665f71c78d430d3c0b3d8106897
- SHA1 169421cda38f25f27b3b89472eabaa31b84a6a64
- SHA512 3b80d268497d4cf3eddc011f9e1e6f022628f589db174ce63476ecc364ef898a5b7fbbefa4e27e776b4cfc9b87c92e6c3ba8075b3839727de58873ba4065c5da
- SSDEEP 384:yHUCguCj7/eWeFSzqg65VMdEKMmgpStgmKatnS9yTFlS0k3toxTLPaJgoRW4YcY2:yHo7feWwgiWvOagmKqFlS9dohzqgozTV
- TLSH T179F3633C19424C85CFB3D6344399D6021662AD26ED7A87DD2A7BB677C2F00C9412C9BF
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Graphicloads-Colorful-Long-Shadow-Favourite.ico
- SHA256 da5c118e44aaac573a9f5d901449918d452e3f96cb9d865e8af514b219985498
- MD5 fddd19e0ff0f031ceb61ce49bb6f2b48
- SHA1 3c275316b4ade307fe46d8db3ea68fbecfbe5062
- SHA512 c5096b5ea3b9ac89e51b79e7bc478a172f4ec1442ee7c90ed79776d4b828e1cfe35700141d1c0504beba95bbb5f5815945b88dd882c3cd1e8f911aee672f3a9e
- SSDEEP 768:2ltOeo5ct/xCbl/RpCqHHL0O8YXjKicoxE:SOW6l/RpCEr0O8Yl3xE
- TLSH T1EAF3C08FD242AC75F8BFF330AB407795E6448A8DEE808D2511EF2EBDA32543678544D6
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Graphicloads-Colorful-Long-Shadow-Restaurant.ico
- SHA256 503b2f0aae3906c8f334e8579b42c7270113d3a81db165d9a2d47eacc298de5f
- MD5 d1c582193c63639a5ab4d2c02751492e
- SHA1 71a2947d645a666c52b6ce8dc69fe0876dc5c660
- SHA512 aa68c8e07437b76b396f29e0ab2540f5e0279eb43d12a318ffa7ffb9a39d7cea0d78a711a08b6d0f9ab5dc2661ef0241900746552cb79bc125229d73b4e19136
- SSDEEP 768:+T7tXtjAqDoXCMtEbrlGjJyA55tXA7MLr5vxFj0EemZt2ll59:+T7fjAqDSCMtEbr+JyNk/Fjx32ll
- TLSH T165F3494019CB12A8ED3EE87B2C15427FFA050D83B9325537664E12B5F7FC84B87A6932
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Graphicloads-Polygon-Cart-add.ico
- SHA256 47a07df9cd21ac1645dcf1e5bc298f1dcc9140db2a36799bf105b09a04c607b1
- MD5 967114ed565578655ee12c352aab91d5
- SHA1 4cba75b8a4206934260c883e8f3443bb215a9f07
- SHA512 a3088ea141b576f4681979396256cb084f947bb0ecf412656d191a0edaa40089d3829ff47ad20c8099240f456407829afc905217cce9f03c99bd7aa47818e405
- SSDEEP 1536:jEyGuVudGQFPRRRRRRRRRRRRRRRRUKFoDqTx:IyGTGgDoDY
- TLSH T1A1F3440299DE7476C2E15ABF29286FFB4A450CCE564BBCA3B55D632EF0A31A1D344133
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Graphicloads-Seo-Services-Pay-per-click.ico
- SHA256 bf68d5da89cead6b9955e9c69e0e02400bdeac0293f429b9583bf2f049c439b0
- MD5 0fcbfa2b5b8ac56bfeb870cb59302122
- SHA1 2e6d50d71fe125a9393ee1eab43998a8749680b0
- SHA512 720fd878db37338a30df15a703e72d632760342202d98c83f66cec96df661604ef8bc8b4680ec154199cfde78a216173765e12c504d4cdaa54739a582a3e75bb
- SSDEEP 768:013e8GKz9wiKtj1Ha0eMfNJyX3ZURbqe4uCbijdO/nPDpXB7YKj6:013Pz9CRa0eGy3mYwdOFpi
- TLSH T168F359430DB3CEDFC3E4AEBEE4978651889E84E46488FA39E82418CEF055956F503D9D
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Harwen-Red-Christmas-Home.ico
- SHA256 0af1e8ed64f29520ff95ecb1d8d2442e583c962ed92aeea9c8333a3f2a1194e7
- MD5 6a093ed2410d5d24a12036996f735f3d
- SHA1 4ff57c4cdd6c94ed8ad28ad3843e10d01e419ea3
- SHA512 e186e594c7c1fb9f789519de0ecf9917a1e8bd61bcd52923b76919150a1b8b3f620f7a5697ec045dcdc6a9259564ff8f9c72c154150db28626055b4fc940d720
- SSDEEP 3072:VvVjK5LuspEH9kTxwxcGXR+TJiF5htD34g1A2BmzpNEGNu2b/Sbry+03rNeV1JMC:Vva6dktwxc7J434aiNEG0e/WENch4mMI
- TLSH T11824D0D1F2007161FA660F325462AE14713B2FA87D79B60A6960BE773B773C3A921C47
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Harwen-V-Day-Valentines-Day-Honey.ico
- SHA256 6f0a3c5cce460f1972d180681cbc587f2563684735c56bf6901d5e794d7e4912
- MD5 40566500c320676d4fdba8c8916a8b8a
- SHA1 c963c8a8692be159856a5681eef95222babe8eee
- SHA512 ec06c1b742aa1e44e17e655a3395541b1862c8487249c0b377aa12ab84a37f0770b962945b337222d2e2932fba8ab31c61336125dfb0b21b4bc815473a463bd8
- SSDEEP 6144:sHaZfv2SEUgZMf0rb8Z3qe5mcCH3r/mzB4rT4jOkfxm9m6kealHX2:sHcH0XKx5mcCH7/CBUsSkf0JkZpX2
- TLSH T1B594BFB4698659ADD4A127795F84F73FA0449FFD2343A61B5B118EFE7FACB288C40012
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Harwen-V-Day-Valentines-Day-Present.ico
- SHA256 237bc770de1f427e89d1d5cc7bcfd73a25482a0bddcbf7798a3c60f02bdaf4f2
- MD5 962026e3e92e86fcb2e7259edeb3e023
- SHA1 85a90d37ac275327e3d75c0f619e5316cd1c3026
- SHA512 579cd0854d45e0d451fcfb01bffedb8c00e35be1742d5018fb2e724bbf82e345397e9b4c5eb3d669bcd2dde40984366698c7fcddc2c29179161d7cbef46f75c3
- SSDEEP 6144:wX1CqVlrBb2+B9E3ivpUoOjBOdWeVxVewm/w9n:evVl1KR48OlJewUs
- TLSH T123944B8272350BA7E4790F70941B9E6017658FFE80DE13AEBF993A4ED8DED11C41B612
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Hopstarter-Sleek-Xp-Basic-Money.ico
- SHA256 dec0c43d0dc3928a6394efa79b789a63d7ffbfd5a957bff1361f2da9b5175761
- MD5 a04f76eca59f9c58d165243caa6d7129
- SHA1 6465b69b8fafcf35ffcc2230366e927744485e04
- SHA512 c89db3e960a55f741482a0f4573ba67ad125f073fc51c3e06bb603207b7507a83abc6f83e2ccca3ea1f36ae486d18963dd936f8fdf7f7efe0bbf46c6f7bc1ea8
- SSDEEP 3072:iFa//4QfpXM/yLyhuVoqsQg8fu3vhXb7uwTpzCp9M0TwZribrT1LY/eeiwymyBY:uawQfdxQuQoGdfVduTwWf9Yya
- TLSH T1E454BF52FD42E1A0CC2156349F77D8B64B16BCAD68B0A40F21E43EAF39FF643943A585
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Hopstarter-Sleek-Xp-Software-Opera.ico
- SHA256 ba6d0cbc1453120c8854c8d8d48431f81e5d8803dd2af89ee676f4bb380040aa
- MD5 964f84c7947a58a66f5e059930417693
- SHA1 bf7e37eeda5dc52034d5e23b092f44d603ed9ed8
- SHA512 a2b3a36924754b4fad3c00637e42eab5513a7643951b6a8fd0f9ff3c81e02cd81ce4e49dd7ad8884066afa158f77f1d48bfa328c3370078c6a7116535a37a4d4
- SSDEEP 6144:NV1oOIqKU73czuwpzxXIyY/l8nS6ybi6b4Z:NV1ou73czuSxXIyY/l8nS6ybi6b4Z
- TLSH T162446BA87064E128C7E922318F81EB392B203D5D9A45A519B0F07FEF3EFD1B77944259
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Iconka-St-Patricks-Day-Hat-tophat.ico
- SHA256 4bbb73885d052825733d7b798f83982312961c18b029104c5b2e20dec9153073
- MD5 7014d15c6ad0450af1b856091f53fe82
- SHA1 60ae03f2816216953b76e996401c9a2fc9ec20cc
- SHA512 4733e993155075dd543df381d471aea31bcc416d20a2976f26cad4c136369a4f43487c7a135942cc64e39b313ab3114681926ead2f9835dae7e7386a793da42e
- SSDEEP 1536:ZD6EUkCMZeMBBMWHhqC4DXCIeaP88L46WAaR3ws2hgHbdq:ZekCMLyBBDyIZ4VJl2hgHI
- TLSH T14B0435039C44D5FAC5E8DD7B2A83A0F7A49FDE689C7510FEEA85638541B1C2B23F5428
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Icons-Land-Weather-Moon-Phase-Full.ico
- SHA256 66ceab0496fb80d706488b2e0fba9dae375185ad81af434823907bb73987f240
- MD5 710295fe313012ab7f2b7a97ed29f826
- SHA1 bd3c3b3baebff34857f31f0a6bd733871bac4400
- SHA512 7e4e6d64e361a9928e5f38f10b39de14974d35c9be0356b2954f6d19b107423996f7d380fbd3660c9f5900eb7b9d78dd346c3a7efb9ba3f3d022830deea79769
- SSDEEP 6144:lgLW7wnfBISNxZ0KENaC1YnGuzSTg1WG+:l4WeImE8C2Gu+6WG+
- TLSH T19B845C266E2DF851C60CC4F3E613C4CFA8706E6813C529A3656BBA3F817C357EA1E149
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Icons-Land-Weather-Sleet.ico
- SHA256 7728f02d0bfdc03280ce3b2d9be8514607ce639b7f977a210f76d99d51664497
- MD5 4a557a2565bbdc71792dde2ba9c582a5
- SHA1 67254c5b5537fb6f75271288e90b02c6eace97fc
- SHA512 ffbf71d08dac0b520efb4fb7ff972ce1c82d6dc19d8bd7bb5599f0bb4e4ffeb0b88b55e5363539cb9a9884715dfd2d44e0e8825a26f7ee2050a99e00c6ca6e94
- SSDEEP 3072:ahMTl4PA2yvyWLrxWPvVTc6lyspb7a87Xjoii5QtYbaQG2+9Pyj3cF8HvMW1S0OK:FTlAivNxW3SeVORiGQtGTpj3QNW1S0OK
- TLSH T16B843AC3F80041E5EC6D447FB50A5A802A9E6C7BD8E97585FACA365A5AF3067403BC4F
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Icons8-Windows-8-Logos-Xbox.ico
- SHA256 21ea0e57efed9183c5f9efc3d2c5b27ea4e907bdc8b8d422882e5ee5e4f31e8d
- MD5 fc4a05a6fe4256718791dffda2364f32
- SHA1 01fbfa39593a629362d0bdb47f19bec4264928ee
- SHA512 4b6984b86637b558bb5a3f02f0106043a48db65de6d82da1c6c952f2edc6cdb5e28e025e03d9402a3829b508c6bab80384a5c9d1b20d0428e82ae02aa21489b3
- SSDEEP 384:Loy4NTtTULLherY4VEPCnFZ2HTLh0aNxZCC4lZUzvKq+nG1RkJTotUsz354AF:D4NYMYxPCj2pN5v7kut9zJNF
- TLSH T1CBF3DC483519F40AD7D8B6389FA1CAB117246CED6D1989B33AF87F9F36FD0176101262
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Icons8-Windows-8-Security-Security-Checked.ico
- SHA256 2c2b163ed7590acc3ebfb42af949fcc2570a49544eef5a8eb6624a008f941ccc
- MD5 a0a080bbecb44b21b5dd2d3b83705cb6
- SHA1 5ba62c6b964621dd58588dda1577402b0c7ff212
- SHA512 0e312a32ee94220036123cbcd2421c0e57e63eebe73033b65855e59758568786815eaa6ff613dbb7c01ff4e58021c9eda84b82ce477f65ab095667527ec7b50e
- SSDEEP 384:+eFNDrXXuO0SXgyny+HgSI/zvipFOeL8m:+INPXekwc4m
- TLSH T1DDF3EB187108F40AD7D8B639AF51CAB50724BCAD6D2589733AF87F8F36FC16B6110266
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Iconshock-Trendy-Guys-Andrew.ico
- SHA256 2b06bea026a928f59a9ee0cec440b9e4025ab1daca4887e56dd9230b1e6f6a46
- MD5 7934b1fce6521e9bbb9a31dceb107f1d
- SHA1 baf0c175f9606bfc3af5c4f83d3da4c6351e9161
- SHA512 b80f29c1a4e316ce7be3f32dda2fe2515c64fd7f574ca4a51332f704fbf9dad44badd1b705275ec78f1e618003d98f8f067a1b49effcae4b5cdf09f1b65fea6c
- SSDEEP 768:Yn4B8xlDapxUzAt4yHa1oCOdCXFn/jzxiX9AA+SNB9Mw/xd7bqKnjWnyhHhzvz4x:lB8PapxUzMran7iX9EQ/qMj0sz4xXT7
- TLSH T146E3C890E1048ED5CAB4B3B83B00FDBA6B522C4E5521071ED3EA7D17365EA4B374A1E7
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Indeepop-Crazy-Crown.ico
- SHA256 741e6d9f5fcdacae84272b1b7c77808e1df5329a8bb3a41fea105f92f3a87482
- MD5 e4352204e8a3d0ce08e96949648dc552
- SHA1 e90ad39ff010185aff1395c0417a1607ddb95d9e
- SHA512 15e7a7122487bf6f489a3626f7a9decfbd7b6ba20beb5f12fe7714661d98cf070051ce549f88810641abff187d162e4984a7a8ef772bef431096f0d5ca858463
- SSDEEP 384:72DoP4pfD8hX+SiFKijmLPwOHc8K/8dOlAS1DANlcYAAQpbYWBYA38o39vDX2w7K:SDogD8ASS6TfHc8280D4u/ATwZsAK
- TLSH T188833E5D7C57C685C7505EB88D9FE4D1222EBC02EC4CA63235B8774DDB71A0EC86AC98
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Johanchalibert-Mac-Osx-Yosemite-Safari.ico
- SHA256 3113872a60a2c0ac37912d35ffd8106ed33b33face68d09dcce7299663d7e9ef
- MD5 f172c4d75e6913157b18600b00def523
- SHA1 22096a573f319874eae2071bf83583b9a6776d23
- SHA512 b36e3f2c27263cb9270da38fc3ca7c6d30019159edaf1c2b27c501053646f690920f843e127712928606be70b3aad39b5269332919b48cdcb5c620e027bca4aa
- SSDEEP 3072:AfAkNK2SGGzx9Wk269AGRAx6RJafjs5tdbfAIM2a:TSK2SGG9Ik/NRCLs5tdbw2a
- TLSH T11524BF927908E483E87C3671C6B3CE7143393CBDA6914AD73199FB2E2573946670E70A
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Kevin-Thompson-Love-And-Breakup-Love-box.ico
- SHA256 ecaf56954dc0dc9550ba671fa341674bcf162698ceaf73406a4662f81f13e76f
- MD5 b4a66fa007347495b48aa2bacceaf786
- SHA1 0d777507732254c4315e11f918df1a32262ea5ed
- SHA512 3d46f0621952b4cd3acc465d77723f6c72de1ab2b89782ca5b57058031e9a7cf4c91df3b1aae69a12efe8dbfe475ab955d82aa351b4090459e688f33797365d1
- SSDEEP 1536:N4Pz6ZJGch4CAHZ5+G9j/nABvSZdAAkkM1hjN3olL:yz6fGRrZnHAGQBYlL
- TLSH T10C04D503ECDD80F7F8BD68320A91C3AA5D246FD89A1615E223B43ECAD475E4E3D4958D
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Paddy-Web20rigami-Firefox.ico
- SHA256 0c28c96f8be216d8d7fa75616547edc888f83e55c56d1e04b5a587e44194a74c
- MD5 38f28e2ff46ebdeb95de66c5e42e2cd1
- SHA1 4f540202aeb87af79be924220ebfb9651d82342f
- SHA512 b8a39179de0c8314c0b6678d41f149f229e8dfcc72ea18d57c9656f1c858aa84e08ffff04f999c4c4fa53fd30e0751adb27bc11172bbf6bd1af34334c5d238ca
- SSDEEP 3072:1cwsP/KWzelqrnmMkUdQuO/ih0cZztew4fjnfXIC8:1rqF4bq8Vfa
- TLSH T1281405C6AA7AB694C43B1FB3C9C1467A0B14FCFBD9C2C5AE65D5321958359C0BE3422C
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Petalart-Business-Cloud-upload.ico
- SHA256 c1211c6a71844c456cf5616538009789c866e92cc09322b6e90d41e91f21fe40
- MD5 4a4cfd942d9e745ab8ba2a9ce7679c29
- SHA1 f49ca97491f2700b825854d54cb24fa12ea97106
- SHA512 3d69d93427c2b5acef9c5a2f7035a7a5544cd77b3a5ccfdc58ab2cd5d97fa053a051221c4cb61eef43f71830d85578ad39366cc6b694607da9857c0d492c4a00
- SSDEEP 768:sDHvcLC+eBEPJBgapd7uw/VJLIc5/4tGrACD/PQ:eHk7/EyY
- TLSH T138F2B6162139E34ED2EF2A74E06E49BD0FB93D27D7026812B5C472EE9CF115426B2E13
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Ph03nyx-Super-Mario-Mushroom-Super.ico
- SHA256 526827c143363abc2a26c7218653e2b03b2c7139f28ce320678e047c6bf3a148
- MD5 b9e5edb6100f7d29d29d11993ffb6b59
- SHA1 b608b986231fc844e9ba962e2ca3a6aa27c005e9
- SHA512 3c9fc918274cbc211c574d6c1cb35bf4ed4e8cc3fd93ea652afe6d03bd2324a60b7686e8fc39edef93d97ecc729e802883ec7a173b2e17c4f21bb84b4958c54a
- SSDEEP 1536:VRAkIxI6n7RKigtKCCSq0lZ7BSfBPESx83ekH/pi3NLAFd:TFIhIgsH6/0UdLAH
- TLSH T179D3E58FF121FF28DA7920734466B60219357BE863247D7EFCA8A71A0DA463384DB5D1
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Photoshopedia-Xedia-Firefox.ico
- SHA256 603337b9f55e6ef644df6237f94ab2dd2076da8d1d6cf7ee49706c8213c55eef
- MD5 3eb4d157501c36e3f66c5d4372a3c15d
- SHA1 764579cd6e3ca4f45679826fc0ccac640d29e1a3
- SHA512 3b252bb695a730f315c541d9ee4d96fb9b4c7b10d3feca93ed1f3d7cb3e46670b77ae2c28ab24f45d5ca5967c21a5f1afe0ffbd1d72b1cd9fadb477407e9f8ad
- SSDEEP 6144:wO/D1sRye4tMMfNjOOOYMwvoSNC+G/8G7sw3dXCeKmI:wa1sncOOOYMWoSNCj7t3dSSI
- TLSH T180946AEE684074CEF67A413A8256D0704123ED2DF916C61222DCBF2F7B314528A65BFB
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Tooschee-Misc-Present.ico
- SHA256 46b3e61f81d7aedb79cf3d3bad2e27829e397a2e037ea263157e6ef160b28921
- MD5 35b95a2b86b834615e350799d7c757ea
- SHA1 cbc57de3f06bd32043c8db327ea1b327aaf82599
- SHA512 75bf478a50b6f9922d020580166edd7fcfad9e1210ca9db2027c392705c1969ac1b8f5fd072429b220e1818db66abe128a032b9ca03e64557237964b55af5af8
- SSDEEP 3072:52BkVMG85MfdGzE0rqJTgDfQkJOC1L89L0OAgG:MXG8id6qJszQkJh1L89L0OAgG
- TLSH T1A0145A5A3E1A8020E028857BD5B75B74D1180F1F598C55BA40DCAFB670F4ECEC2BA63B
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Tooschee-Misc-Sync.ico
- SHA256 e5bf9915525c2951ffc691f6c085fb08c4462e732f36d0b4b200fa99d0fd507b
- MD5 9cbd68e9a3cfcc333de1e1aa7f47aa57
- SHA1 9f1f53fb11dd24e3e3215ae9eb517f18ccd4bfd3
- SHA512 45bdd7746b7d8b21763b930e08a0e5134d6024cf3a21f56ffc8880327b3b99524d5490cea3c7af8dad633ea85698e30971e0c9a1f974821ea980ee5560634c33
- SSDEEP 1536:oziygiYWqMIJXJFavTxYVylZYQYrCh0AEhV7wlHCF+It:qiygvWqMILFavTIYY7CybvwliF+q
- TLSH T1A414BF317801D479CAECC1B24DFBC99952A03E2EBC01241779A07F5F39FE6196A07A5E
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Acrobat-Reader.ico
- SHA256 94cd1892c164592165889abd7987f34e8cf3350603939c640749bfc3f3c8e09d
- MD5 804c0877429446f9b7dfa2010d8e902b
- SHA1 1ac1dd2e473a773b1a4104336b906901c3810ef7
- SHA512 937a1f2d43c68eed9aed86fa3bdbe2f3c6981771e2b8ba128442c094c8f3f02a473d3e29fc276ee9751c42bb3a649299aa1af18e0e654459af5d0fd6958dfe7e
- SSDEEP 1536:AiyYa4lmVQ1U3Ox7eD3Xaaaaa3aaaaaaaaaaaaaahNbd1EhDOLs/t24ax31m333p:pVJlF1U3O9eSNbdiDOnls
- TLSH T1B214B596AD019E07C7F321F2AF8095B331191E757A61587895B93F3B32F8C879B89720
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Chrome.ico
- SHA256 b8834db43313c01d641fd4873d852ea78527f3faba1150b6d79a2742de016e7a
- MD5 b93625b86050e1063b21a7ebb1289720
- SHA1 762ce78494aefe8485ccbef80aedc063d76b0445
- SHA512 e3a8678fc90b738daad929ae1b5b8bb6eebf68a4242789cfb4a6e4ecec580957aba6d139141aef35d56b37ecb9bb8b8547631f50b80ecc162e8917195569cc9a
- SSDEEP 3072:UWJJb6FJAMyhnOkAunMqGPwKKPZfO6Ha55fqRn/kjwRJ4bscwEIDlezW:cATnOoMqiw1ZjHavko0JJozW
- TLSH T1A2349D10FEC4AFC6C1212A378955B274130FDD192E48599AABE1EF573076B836F7AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Dreamviewer.ico
- SHA256 84e0fde276904d0d6ceae83cb1719275c64ed355c212a08c3270a9a4bfe7de79
- MD5 82a4764e633314df202913b879406f23
- SHA1 51764c4bc155c9b8687123b35826db3ace8bf6dd
- SHA512 71c9e8bf96ec4e38f388efc932aeec6e6877b1932b94a0b0fce95c560fec1cbd48272367470e320dd236289bb7ffee90cc26088c7bd7cd5742a95a4b76ac2c10
- SSDEEP 3072:manGCYukn+ErsZ0Qi+4ExUU1KP0h/71HAhdA0ahZc4AdcABX:PnGCpk1U1h/712ALXAdcAX
- TLSH T1DE245B321E074A2DD3D800F9D059D1B886BE8FD4694F9762F0E09F97E4B8D4F6A96078
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Facebook.ico
- SHA256 c30436c2e09c2364d3c35d1eac84acf666f392718fe08c3e28a6ebcd412174bb
- MD5 5c878a7d4550f60d71e89f97765f66a3
- SHA1 4f3e9fd5f9f9a54a53ff7f7a13a1a2bff4316744
- SHA512 f7c1c6683e647e6685b375597084a564e894b16f4fc526a9eccceaa283d07a14b59766ccc1ef66f816182a9638881de0c6da034ecce24c85c1d7d40f15e4f093
- SSDEEP 1536:LYHD7woJfNf2neNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNUnUquu40vK+:UH/bJfF8AZbwk8bYmFPOa
- TLSH T181141B732A9902F9D8198F36F336B43563732C77A6A984E174403B552EFC191EB12D3A
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Firefox.ico
- SHA256 9aebd0daee148c86c47a5b0b8b9410c41478ed9959f87a6cdfc408cc69890e70
- MD5 22a3cb54088c5835a0d5a6b7fda43d9f
- SHA1 9a4ea364cf60cdc48aaf6a4265faefb2c286f40f
- SHA512 386cc5f3ce31d8468afa1cb6b77b774938f5687e4f6ac9d054ed6712a554cdb74325be6249ebcaaaec5d7ec6d3e5cdc95ef2a01ed0f3630153739cd396c1abbe
- SSDEEP 6144:wd9lnMNh/iO3gL3Pa5vG3/+CjHsI6FXSM6/Sb:wd9lnMNRiL3Pcv2+AJ6FXNASb
- TLSH T16A348D94D5CEC482C9216A30B6ABE7B2773F2FF5744A4E4C65263BD034B785BA0F6406
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-ITunes.ico
- SHA256 7f214a53b12c34be44ca06139a6ec49c7f13b2605df354c5a0834345ee78f2b3
- MD5 aaa140f0f5b39882527fa2849ed38e92
- SHA1 dbf664aa8b156619c8684050086c6afbd9301105
- SHA512 15c72b84ab634a44f325c2ebba609bccfb8c9d792d128feec0e561fbcf25f4b2e406633e2d97e702399d9584362f4c7f719333ecdadad1b03df54931dda9c7d9
- SSDEEP 3072:gn7q2X9n7RMm5xeWiGbnX93s++j5BXO5kb9J89h+uCRtb6tvZQbAZr:oq2X9qcxp7xsptQc5uitb6NZAAZr
- TLSH T1FF34BFE13F02DD06D25973376252E3B94B78ED083A463652B5E1FFAF3535BA27A84201
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Illustrator.ico
- SHA256 26760978a4fb3579e20d3b12f98af585fbd4df84285d31ed8a9af25c31a966c5
- MD5 98736ae975ec6dd8b885eebc43a6fad9
- SHA1 338819a9c59671ef39156aef7b21d7ebb2080ea1
- SHA512 47cbd516212eeebe5d2e62702408f5a8341ccedf5d88fff2508c104d6f9d8000238a0ad8c996b8d1a09eece3073e98960d1f32a13fbf5f13390404d43f428d19
- SSDEEP 3072:2Nu/7L/NwFG8NGGKeer7spdDXasF+UJcupnidQ/Bsh4E7um4qFrZCFzxCgSF7RPF:L/h7umLFrZClw9Jnx
- TLSH T1D124092AF9A35C57E4812E7E8515F1F0066E627D3C3BA1B97D9C2356A1228938DF3F10
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Photoshop.ico
- SHA256 02db5c1b1dba6d0b31ba34683e2f291868e98dcec3b5f319cfc689c14749f6c8
- MD5 13d84c9f9626dc0ac1218a7fc58d79fd
- SHA1 22f1da8c2578481901c1d87c3c21f791589a047f
- SHA512 3cb8cb86d5d8c33ffd3c4371080a1636b951f6a24220b876641b856df4a7148e36278b97dde6adf8b613214b2f1acfd7165d9b944c4351ebd11e86e3ce3d883d
- SSDEEP 3072:x9Zv9N+3Ga7/VLQmDnHeu18ADLsH5u/Ldqo3ubP+oZ7:x97KGa79LLDHh8m5Dc+g
- TLSH T120244BA25DD3EECEE7D018708139EB3085F776E999328582DDDB2EDDA13C6953123026
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Quicktime.ico
- SHA256 58f475cd259b552672d7c2b55d1dc7715a34aeb3618e891d609a5a33c173fc45
- MD5 bdc81be3a6333a7d8975e0f692b2dc7e
- SHA1 ca9f9fd57c73515eca1a1d531545ed4da8960009
- SHA512 92310c9f101d7c432f031b56adf5dd3d27c68b4d0672971e5b272fb08f80188abcaaa7573d6927c758202534f90816a0fa95b71fb615ddb92f2e1c062bc4e617
- SSDEEP 3072:pwwdT3hnu47fpYNqXovsEZdKI/oyvvmW0gwAo2IfQHcGYFCSEj:3T35ubNqXoEDyvD0gJxIYHcdsD
- TLSH T19A34BF60BA9A785FE147B7FB4B62E9BC4778A6687743C32F2720574FAD25A54DF00080
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Safari.ico
- SHA256 a37d2041c211db37adb6cabb91645a4a190db3e75ebdc5fe6e81894d79df1ce8
- MD5 109ebfaf169ae434c0c0c4947393342d
- SHA1 669773bfc0721c3ec0ca11e4c9ff22557fba94ab
- SHA512 a4bc517bc532c75f0051562e22becc855c146b64e7bcadf8f476259fb7967be812ba0c3f5cfbcd18f616377074802fd80147cc15da90ab9e5030da115665ca6f
- SSDEEP 3072:jDTwyHyEgJyNSZYR6WH/MAYlKoYRcoBO3pJYY3UQ0F1DCZGua1P0mj:LUE8aSa0W0DYRc4O3EY3UNbDeGua1hj
- TLSH T153347BBDE944E801EE4234B7C491A1FA83349F041FF65580BEEE77EBA7F49A05904E25
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Skype.ico
- SHA256 c44e1733cd141fed84a0a21d13446937eddb19e583eaf2561fd971d3d6ee54eb
- MD5 9924ffffc1ec3aaa5b632cd9bdbd3198
- SHA1 88a37fc4dcc884f7d00778c77e8d6d26a322b9f5
- SHA512 d3bae583cc99dfc5e9a35322b28d8d20187c1962f0c9972b248ff0e034fbdbcd0b4b30704ddc81520204ba6479809c8fd725965bf0f5d5db749581875cc26e3f
- SSDEEP 3072:AvVkpdFyJ3/GBs8wGR35tPfgbTXMhpccrcFc2fdAvHUp+lVNpnqbb111rKZYQ8S:WVJ318PR3Yv2pccrcFc2uxzznO8ZYhS
- TLSH T1BC343BB2504006E4E9AC6A384131DDBD4F1AAE7EFDB064DEED48B56122731DC61368EF
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Thunderbird.ico
- SHA256 2929c71fccdd683b953e0a59a4ef21df703d59e5d08d0bfa193ef078bfc90f25
- MD5 e8897b34f81d635aba478737dc1ea06b
- SHA1 aa820313997ba211a4e435d1c900e7a3d210185f
- SHA512 62357dae2f040d77a3a25f6a698e06dccf3cf28011a4d9d24782c56fd1880a4e22f391ccb0ed6892dfd88bd9411abcc6b274a8819818604b3dfd71931d9e61c1
- SSDEEP 3072:Q5+RAEhS6bKDGAwC8CwqgJ0zZiACGLXCEkNCCBwok8b9sg:S+A6S6BAwC8CY01iACWz6nBV
- TLSH T143344A10AC736582CC39F170C1BEC9B98379BC1AA3C69D6AD4E0B121AD73D63FA17156
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Utorrent.ico
- SHA256 223da657dde7c75c34ea2e4445c5953412532b3706b0426d11bfb2d851d7bb9b
- MD5 40fdc91f864c65c3966f11c976e095bb
- SHA1 a9240da62b78a21924516708339ccda8816721db
- SHA512 6a8d965af88814d2babad5f0668f6975f9435dbd099f1ea86e132b44eadcfa996c23e64e10e721677099df96c71e3112a30bc432d077a259c9bd07f5c2b9b566
- SSDEEP 3072:XzrhgvwNZdri31w6EOOKuCQG8ebj0TSsc68/Q1qGrYkbPyiUtEXOXCbbd:D9gvwrdri31w6juC38ebirYkbz7XBnd
- TLSH T1E4244BEF516EBE8DDC20B437B06E6A47D2613CFAD6035915A6C063C62AF2342D7607C9
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Vlc.ico
- SHA256 8cf563caa60dd13914578862b8666ff250def03f70110b99c13e03b0911219b3
- MD5 f28acd30cc87113fd0ddff76fb4bd62b
- SHA1 e3cb20223eb5df1b923f5e48f7bc0146eca98189
- SHA512 cea294a7357f12532dd08c5a58a38442ab550df8fcd926644103611bbf1c8fd86b23fdc8dc6a6f6f4d0aa6c735533079c52e42309fef54fb3dc157907cf0c5b3
- SSDEEP 3072:NkVlVIG//km00000000000Mv00000000000PW0GvaRaLJsL3SPUdLKtIIhp:NklIpG90GSCJsLcZ
- TLSH T1B6245BA9FE94ED8ACD214572DD1FFEA0136E6E74BD05108A32A57B4EF17F4138872602
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Winamp.ico
- SHA256 225c64d24e37e5e4db7a90987ef5359e79709ca7b7a8c1f2aefaaa71a24a5711
- MD5 8c62608c708fddb202fc9ebb3ea27a08
- SHA1 eedabfcc137c3291c13e1c320c6727113195e4cb
- SHA512 b6140124270e08f13d3efadcb457a754233a5c7246ae71981e194f916f5d9cacb2bcd7f8e96706a1694a3c2e8d95721aba5eb9f9653e5a2d72676ff9ba02c628
- SSDEEP 1536:6Q92tmauZfH5Ht1zggOHB8N8gAPCKsUeDzOzay4JMd:6E2UakHLqHBteKXg4H
- TLSH T16024F9647FD9C905F39654B91BB4E9B4CE0F6D491A5680B0E8FBFD6B723CA9234E1002
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Windows-Media-Player.ico
- SHA256 86a6271258059309dc79b59c0e42fcdbe8b159db6c0c1c8a19f32dead0ff0c24
- MD5 d589227e6d039e8fc02e90b150449718
- SHA1 6a654b4a47a9483027528d5949176a062476eed7
- SHA512 8e4ccfdd964ddb6855d0f4a73d9fa8c12672bba8ffcdf2a6735879aa64250f1e1781b6c5fa91795b94b4690ce862185135c523e7362f2f58499189c7d759e80a
- SSDEEP 3072:b45Vok/TPeJqG1ttUTWDGwKMw233JCfB7WMKS:bkLmJqUU6DnKMB3ZCfQy
- TLSH T18124D6DAACF47A80C41F85F28D666F535BBF6C2BD7428490D291BB13980721A0DEB51F
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Yahoo.ico
- SHA256 ee637a571644d00ed7bf1c66b80c27b62281e08c00d9cbe385884f9c05bbd117
- MD5 88469d56079e738e91576aaa94d1f7bf
- SHA1 f8406e745a1b332a4f93301c0e32260f5ef4b88f
- SHA512 4f8af5067a060fdf50bb03d31255ecfe7f66f80f5291c17ea45826f98c6e9dfe50c2097b2fb283f941965ccab047d0344892746b0498309edc230a94ed51d3b7
- SSDEEP 3072:0EZPb8bzmoeYdn4FRVEsY4b4moEZOTmq7RVkFf:rboZ4r+LE4md+zVVMf
- TLSH T1EC246B72B20643D3E88E93B53585E16B3E68AC723C33A56D700BBF5E76760F23115869
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Icons/Wallpaperfx-3d-Softwarefx-Youtube.ico
- SHA256 8c6083a889bc781e51fa0a06ef11ebc7db03fa5c727036a9b9ebb9f85a53dae2
- MD5 27545dbb1b25dd73faf3b34e1429ffb8
- SHA1 c015a869481592c57955d6064f870854b447dccc
- SHA512 38f392fefe45851f317cefb5014b02249ba8b1becc610ebb5f585d4bfb241054eac264118e60f5254a492d6cd15f0937797d66cedcd1d93e7c7015c01fde16c4
- SSDEEP 3072:CDnCoqaE8qRMar9YGueiZO3xyYYYYYYYYYYYYYYYiqOpv3VTlye1CmQfhZsJ:CDCWQngeiZO3xcpv3VX1CmQ7sJ
- TLSH T179242A84B4C854C2E61E0732987BA62824517EFF96B690BEB61E773A43733C1442BD3D
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/NjRat 0.7D.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b78fb092e151db613cba51d7f2532547e48c6f4712809a485f272e2ab55776a5
- MD5 70ea9c044c9a766330d3fe77418244a5
- SHA1 18602d0db52917b88cbdab84ba89181e6fd4686a
- SHA512 5261865e7ca21e928b956a97518366c9dc218a2312961e0ba0b72b37ae7c797176382de3c3dc1d2949aca51c3db330562f1087a71efdc7c3c3b8f8928872f917
- SSDEEP 98304:cn9aRMDoMu2EW5nnim//7uvwCt5tuo32v:cni6nnim//7uVtF
- TLSH T1CB965B12B295D914E1BD63F4C2E182F606B4BD0ED134C63B25A43F69B9F1BD1BC42B86
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
8925674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\HMJ\Desktop\njRAT v0.7d (SRC)\SRC - NjRAT 0.7D\NjRAT\obj\Debug\NjRat 0.7D.pdb
mscoree
_CorExeMain
Name
.text
Size
8.5MB
Virtual Size
8.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
APP - NjRat 0.7D Moded/Plugin/cam.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 881d5afb9aa4799c73e75dcd28587dba85dd844e4137287ea48c6b66525e2638
- MD5 8ce3060686462fc72ece2701caa13e3b
- SHA1 19fc9892200de4db332ddd0c14b4b6fd9a35ccd4
- SHA512 ef38e00b054240a0d4747bfd79db860015ed027735c360de58af6889a69482109ccf74770608a2750542457ac38aa79367431ff6ca77fae44d7e3a7023f33a17
- SSDEEP 3072:31IL2SeOPGmBUMqtZabredepzZxgUPWeJP3:w2Sm/MqueepzZxgQW
- TLSH T12EA3091A77479B17C54C5A78C0EB2B0403F0978A6373E7CA3F6C15ACDE633425E5A68A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
107070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
APP - NjRat 0.7D Moded/Plugin/ch.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3c088df7119c494e3df95af42456225f4dab1c3abe003869f8c79afb0993b027
- MD5 2fe4b9dbd31f83faa7aa1c692ba4d3a2
- SHA1 1b3c03e29302a0f07acb4af306a7ad42ea4827dd
- SHA512 cd169dc1d2d5cf0f538334b8ac31817ea1a4e2c8c0faca6a715c63eb4aa464e8aaa4f6b10fe030f46a37ab18a1cd6fe099c662c727e107cb87ada1a8218bc5fb
- SSDEEP 768:FjTkCC7kDA87eqVlviNDkpI/pDwxRcNDRQt40BthZWMaGOQKgB22T:dkCC7kDA87eqVlviNo2hkxmRRQthBt3O
- TLSH T1E7238315B2874313CA2C65B540DF352413F3978A5B33DA9A7D8C02FD5ED23929F86B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
52094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
APP - NjRat 0.7D Moded/Plugin/mic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 27528a77e27d02aadecabfdf658b2da638bb0ca2f2c60bdd9d0fd5338c1fc346
- MD5 9b376f0d44995ca15d43f7943a602fb2
- SHA1 18a2bb7d13836256bd5f39089203f18d740669d5
- SHA512 4dfb0c49816e0d0c2f7d0d76081725bd48d3713506ec51ac6c06ae7092908d14e3683d707d6f332505163fb0ade0ee6b50a355cd69c25725e829ebb23a3e93b2
- SSDEEP 1536:ZAwSxproATOoeQHshYNR1zTTxqPbKhOCjXKem:TSxpr/KoemAYxTTxqj
- TLSH T17873F814378B1E76C42A09BA58C73100B3B25F997337E61A2CAD11EF5D433DB9B44AE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
84142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
APP - NjRat 0.7D Moded/Plugin/plg.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 13043521ed6876edf2736fc46a7c49e6b639cfa7a866ca11de26f119796cd521
- MD5 c179e212316f26ce9325a8d80d936666
- SHA1 14d08b3cda60341d1e9187fc14bd64ebefe4a5b6
- SHA512 1b5eb687a9932c82ab2e655dbc5df8ba667a023e7568dbbd13c503a54661763193bde11937f87e2e09b88d770c8357eda07589d526e6103db058038e3ce3b750
- SSDEEP 768:rVRKgRFKn3N5U2jNGUyXWI9Yi1s0sbtAEsz8CjBMiPs2T:pR3R895Npyhn1sBbtPsz8C9P
- TLSH T10853D80A77878625C55D177054EF512007F787872B33EA5F2CCA0B8D4E923DA4FA9B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
71726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
APP - NjRat 0.7D Moded/Plugin/pw.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca6367d1ab873a55ced13d7024c530bbe4a6a703813225233e59041c7ce14eaa
- MD5 ac43720c43dcf90b2d57d746464ad574
- SHA1 eae39df1c717ca74f6f04d5ca8478ea55145535a
- SHA512 9082b3cd8b36031256923c8f2bed628e9331129bbf09d111d9d02268a49e493248e5638ddee5b02da66e9159a608f8f26499ca0f736d6a369a30f71950c60d40
- SSDEEP 6144:QxY714e31bXJVFJmShoCKFdZ3aDGjXsCUjguhyUOMO:7ZxJ/JmSG9T8CEgdM
- TLSH T19454D007728BAE61D47C467123FB72D183B5AF461633D51E2EC822499B3B2D3BA41BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
284686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
270KB
Virtual Size
270KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
APP - NjRat 0.7D Moded/Plugin/sc2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 010b1ec566be774a2d12146f9826aa31fd7eb6ffe7b45ce5e572b2d8c7f815c3
- MD5 2d65bc3bff4a5d31b59f5bdf6e6311d7
- SHA1 43962fbeb93fc267fb1c7036a12b8c5d6f40c28a
- SHA512 b210d447cc9b4b89402a2a1d3d5e9cfe13ae897c47094be4110ed3aac109152c8a45ec138f73b703e7d3799934234cba4ca3f2439b3dd193a4cec671b9edaa6a
- SSDEEP 768:mtAX1G0UYRxIDbYDGN5/eoK79QlRfe2AfgFTMBku2T:mtAFZUYA/uW2x9CJe2BFQB
- TLSH T14423C602738B5B12C86C097240EB252413F19BCF1733EA4E7E8D669D5E933939F68B49
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
52238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
APP - NjRat 0.7D Moded/Stub/Stub.il
- SHA256 8c57706fdafbf6981da459d8ef85654b1a8830381652b44cd486f6747245a2fd
- MD5 77e35880da8fa98f1ad8dc3ab322af22
- SHA1 9e69dcb4b4f1f2b3c38d3b945135536a2d011e35
- SHA512 1e2ea9ecdbd529ad55930ef58d3fac9640e041d2d5fc07a2f2c4738f749d6cf7eff47a6397ffe6be7bd7c73e3c08e733f00d57e5917a0b20bcbfd43058506651
- SSDEEP 6144:XY54wj3kCi/A9rOQCMUJIghk/UgfnktBSMsC9VFs:XY54wj3kCi/A9rOQCMUJIghk/UgfktBO
- TLSH T15474CC288228959AD5B2A51DBE71CB46F77F12270F31AC967DEFC254BF31284817063B
- MD5 SHA1 SHA512 SSDEEP TLSH
APP - NjRat 0.7D Moded/Stub/Stub.manifest
- SHA256 835a00d6e7c43db49ae7b3fa12559f23c2920b7530f4d3f960fd285b42b1efb5
- MD5 4d18ac38a92d15a64e2b80447b025b7e
- SHA1 5c34374c2dd5afa92e0489f1d6f86dde616aca6c
- SHA512 72be79acd72366b495e0f625a50c9bdf01047bcf5f9ee1e3bdba10dab7bd721b0126f429a91d8c80c2434e8bc751defdf4c05bdc09d26a871df1bb2e22e923bf
- TLSH T16EF0DCC1D188CA6AD73042A13A66E410A2AD435B19DD49EC74DC2ABB6F0BAC680C30F1
- MD5 SHA1 SHA512 TLSH
APP - NjRat 0.7D Moded/WinMM.Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
- MD5 d4b80052c7b4093e10ce1f40ce74f707
- SHA1 2494a38f1c0d3a0aa9b31cf0650337cacc655697
- SHA512 3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450
- SSDEEP 768:LyasDzF2TDSemqD9tGI+ffwj2Au0LVpqmf7KxcOOrYCPTxqPb85:LyaXKemqD9tGI+ffwj2Au0LVpq4KWrlv
- TLSH T1EB13B60479A85CB9CB2F013D6CD61211FAB18D647227B62B1CBE70F318977DE9A41AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SRC - NjRAT 0.7D/NjRAT/Forms/About.Designer.vb
- SHA256 f78356a7d6df7daff0c865d0e1201911ccb8e8ab31c5a6a05a01634a93e1abf3
- MD5 e96f5741f9f0ef4c4bcbb4823b0e76ab
- SHA1 617a13bf238a3c73e37268efc9700c6d03f5ede2
- SHA512 4e19b216f9541e30c8ee76d7e38626580382df1df8c247a92a2bdec0babcc25fbd525cacf34cb073c164bcd051ff21b4a73b8834adb3bc336179c532a0dea677
- TLSH T16371C17656AA817400B6D8965D0AE083EEBA1573175C8EBC348E4648DFF20DCC3ACDF4
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/About.resx
- SHA256 22c349eee9edbb980e48aeece17834b8788f169d856947d00bb5e8bc14960890
- MD5 fb262bda6577a78c6be226496d3ae4ca
- SHA1 21f65cecd2f29495b0c5e1143f91e55ba298cf94
- SHA512 94316b4d1c657078eab9373a7dbc53ed4eb6e4f5578e31f19ed41a0a716bf591d30225d7db149b0543db28fbc6e62f662fd7c64573ee457a5ce92941ee4da737
- SSDEEP 1536:Kj2v6u3+j5/Z8NHNSRGvn6tutaKBH44eDD04TYwTGmKJh/I3trUg:Kj2GRGP6tutaG44GHqo
- TLSH T17744DD733D86BDC13A3A4E559382AD70FC4D6717127884E7BA5C05B63FB2531AE0A9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/About.vb
- SHA256 110101d43d02486ef75bcb9f50552da4bf6831834413f44a315c8aab11c0b8f1
- MD5 efd7d20ed59a9ade08fc2384f71b07d6
- SHA1 cbb0c9bf6a19f48553ac38238f997149667cd7f4
- SHA512 7b4c7668bc9dd744077a2796ebde1ccf43f32efc6dcc5d333ac91f126e79f72c05f6cd2dff9652f48adf457fe30cc002db63e143d41837b3b6952364505e8088
- TLSH T1FDE09275979AE1E902356C4FCEC1D09296A511133358BBF8358E07B2CBA28A81339A35
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Asemb.designer.vb
- SHA256 ad2e5623e60d99c1c27b9c5bf3b3c6448d6696377607030ff908e8e9da1325e9
- MD5 66c7eab4547f29024b71ab70b1cef725
- SHA1 5bf3262137bd2a3daba475a07a86f49ded9e43b1
- SHA512 5c42c2f9aeba4507bbe9b3191d6c1a9f44eeb6ddd87816c231ec7cdc3a2640e7017b1f070b4a3883e267200d956117a2340f3d8128d22df74c352963c44a9883
- SSDEEP 384:irLI3P9kHKDgJ8ewaIOqQYynzAguCm+xzePO2nZCd7GmeaoAoO80eOTGu0V1DECm:irIeqQvAIxOnxm38Pu4DJotFOv16Pbfx
- TLSH T14F72677E53AF910446FBE55A056B9082DDBA03333760AD9530CFC510DFBA24A43E89F9
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Asemb.resx
- SHA256 8f4923a2543dcd813a46583c4683d7eff17b6910e63c72079741bd0e537b1f90
- MD5 20a4a02035a97a114953c565457a333d
- SHA1 45ad7f866bb5ff47e2b14cbeea5a71317560ebec
- SHA512 bc997ba091084ac13a759595f1b0d81396aa5e5cb9c389a728b9880227d3c22b7a785ab8ce625742a936f370f88b40ff82ca41e7ddd5b0f1ba88aa4fe2358604
- SSDEEP 3072:Kj21uiPseKveB5bv6xTnyAsjD2zApHiCKns8oZZcZZZZcq9h8W:Kxle4OvubyLHiCutj8W
- TLSH T1E8541634B9211DE9FE78449B57127D39FD700A4B53898986F69CBBBC4FB2C252DB9020
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Asemb.vb
- SHA256 15efe5bf7f46b8061538195dac25dd3372db89164ba4fe3eae3b323d3dc0c2c3
- MD5 8f1922618ff5e6acc4d5ef0ea9bca77f
- SHA1 bb19b81f91182e71d2bb46c188b38fdfc6093209
- SHA512 39de6d95a6f4f6e38be6b151fa05a4469be5e5d858a5822fab7b966830f763d8b23d9dd010a2c0d916f41e423bb492d724f4020221a78f7e8b88c7fbed1baf39
- SSDEEP 192:vFXkBJxZh6PC87OmKi3/zM6djurFoCjAbZT3UiJ6TAnD6V+6rM6pNuA6rNum63Nu:vF0xZhdQki4X6R/5nD7L0NXWNFSNO1qq
- TLSH T1B8F142AB7D0F8AF1CB7729667D03A406EF62130B40B460ACF44C45685FB489D93B9BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Builder.Designer.vb
- SHA256 695c81cde18ce5207c3f1195f6cdb682ca1a804daa4756ba08502327481d3596
- MD5 20dcd0edc614ce9fbeb777738b7616bd
- SHA1 a9ba5949fb3148920bd8d7b9cccb7582fda1078a
- SHA512 4bc462ac9138f01118d3f96813e71677c6fa5c1aa674ce042a99e7cf4202148596f4723f36eea23e182b941fbe0bab1827ba0d4f22e1ef3dbbf658949da2d6f0
- SSDEEP 384:VrLVVbN7KC9Vf1Wu2C9EY1vDEC9/x2cUAIC9+Ov4CQkV9KibuKmC9w0G4jJqC9fe:VrPNguDD3UBCQdKfjWnzQ9A4pjounuIw
- TLSH T17D927A7F93AF904956BBE199441BC883DEA612632264DE9D30CF4510DFBA14A43F4DF8
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Builder.resx
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Builder.vb
- SHA256 ace0d0cf50f31c97b5510518f2a8ab3bc7e6479bb68b88fd1bac2af115ad178d
- MD5 66a8a564da76c603fb4165f3d9b10dc2
- SHA1 e95f926832281b51bcf3a01006560796a8e2f7cb
- SHA512 48c11b07f5c39b4737b6f12f01e32b5fe27c44703faaf8789618d6b0e272ad688348b6c4d56937cd7b5904a50b3bf985d695b08fca93a32dc7936780fbdc8b65
- SSDEEP 192:RaImF+HcSOVV74ImZT0hEazFUHzG9MRRp3HHi2DWGdcY3PUHC4snTaw3HUXCe2zl:RaIPcVH7MniSWhYMH+nTFEXinTAtk
- TLSH T17A12746E6C8F95B8CBBB44579942D85BDB10081B86B535F8B88C02540FBD8ACC7A77C6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Cam.Designer.vb
- SHA256 4ee87d61f9228eb03a2bc2fc14c8af002df78a5a3301418e15b06b3f891a4be8
- MD5 23a94f00f909dff3dc92b76f3616dfb2
- SHA1 aafb2bb026e72e4601f0b16582078007dcd0ea7e
- SHA512 4b86d896591d29c7c29288288e84ac2bf35c18f0469d680c9a09c605141ee91da7c52e7b3079db5628ccbcb86a4bd1af407a63b6c7c1077b449e6a34f9c8871c
- SSDEEP 192:ocrLE8ml68mLo8L7jtG0GZEY/GE8QOE5gt/l95/+EoJokTq/l1jy7mjdBEko/UuJ:ZrLE8ml68mrtG0GZoE8QOigD907ykTk2
- TLSH T1F7F1CFBA52AE801415F7D859580BE983DFA81273333ADDF034CF5400EFF215943AAAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Cam.resx
- SHA256 358a0708f5784e43be3ad185ee35d1818f5faffb6af32e0827b1d4119d72f2d6
- MD5 2d0a6a7f19febb71d4f40fc9932dcbcb
- SHA1 ff1b4ce6beeb85c181f138b5dbb8ecaf6c3de267
- SHA512 c235d01e4d70a3b9ba39d10c9d42fb32db92c92eee5263ec47932474f8bb8ec64ba62bbc23c2eb670c55b056b4e19f121c55481310ff2ba699c8d026bc897b4f
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3Fqvc0bapGc:KjrbLPD9sLvIzSvKgIqUyakbaBbac
- TLSH T126D1F045B1C1DD260BB3482CE6527A88F7A8923B02356C54B4DC661F6F72C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Cam.vb
- SHA256 5f13f9c5312fe8c0e90843df1accbafcb928e5bd1ffd9a0706382521b8545f55
- MD5 9eaeaaa448867fc1090a8917e3153569
- SHA1 fcbad7c53d1fc27d2713a9a1af354d0dbdc76565
- SHA512 ae5c9dded5b05257708e2592a268be367891120ae30801570d993301d05ad559414534517ef0479f2ad6f28d1ef0517ca4dcc6bc52a916bc6a2cc0b12a466805
- SSDEEP 96:KTaJ/gysIMtr/lXTZdp/HYpVK/ngNU1hNlPHfe/aQzxpC5rVzHzko:WaJNEr/prpCVK/wUrPHa9pGDgo
- TLSH T145C10D2B788911B94AFFC99E9C19E486DFC10153123969F0F2CD5592AFF00DC92AE793
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Chat.Designer.vb
- SHA256 5000dee07cae76aa1a0bd663f773b36c543a2673bbdb99c1912ce23faf368328
- MD5 cce433540842350efaa906544349df86
- SHA1 c7378626d519c60d035aba805df70fa7a7936950
- SHA512 4378904e95372c0ea556c2b798909a84f0b88cb71bd908d98211fffa6f5f5c9aaf2ffb9e9dca691435c5d5f1143bd9f62505b35a997e43d486ca83ebd7a6a06d
- TLSH T11681A9BB42EF815441F7E45E581B9093DEA901B363B5ADA0349FC414EFB221943E4EFA
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Chat.resx
- SHA256 0bc3274749ebdae67e236366f29a89242eedd4d35b91b13ca6adc4f2693819fd
- MD5 431944f6e9ea82e5462dadafd5066b7b
- SHA1 a4dbfb015e9bf80c24a83cc0ef117fbfc638f55a
- SHA512 8f5941176e37a61014d0f249b15ebc01cf4e13fb24fd77a00d08a0aea9a1ae645550694ae7bde05d5c4322c0885bd753d70b7509c537624e8fd8c18751afe4a6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3Fqvc6bap6:KjrbLPD9sLvIzSvKgIqUyaqbaE
- TLSH T162C10145B1C1DD260FB3482CE6527988F7A8923F02356C54B4DC661F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Chat.vb
- SHA256 a9c21a53188624e4384993c6a55c478a3bc959b6d9e8e50ad9305259af8be527
- MD5 aa6c6c8675b284fcd2d1b01d77388a97
- SHA1 ee17b0764ebb931463a577c4427f3b0eaa080f7a
- SHA512 3d7442619972a31f3aa7f26e1542728133f07b6a4d6a68d94eb1c51541f0caa8727b0b32d00d78c4e8befa7ce8aeea9283822b52752bc7d5fff6761f17249aa6
- SSDEEP 48:LuTucOaZgGFwKL7yzKkto/BDpv8n/e8HcKCaxmM8HcKya/DiD5+3sD5+3fgWtY:KSTaZVyOk+/PG/e+pfOpQsY
- TLSH T16891AB6775CA267582F6DC2A9C8AF083E68514131339ADF0B58EC4B99FB16A410E5FC3
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/DW.Designer.vb
- SHA256 cb7b30edab50bdcb77d1b9fb9762b10dc1c0b11871823769fe86ac7cf1b1832d
- MD5 60b9df76f616a3bd462a3de18c7abcf6
- SHA1 3d8bf22d7e34cc6f14cb59a1a9787eaaa7574163
- SHA512 d9f5450745211da2db620153342bc6d0a00fda3146b12dbba0eb21bf65f8e618034ce8f2b1a4541cfa48cc1e892a6c6b195542409d7bfb03e42500cffad71415
- SSDEEP 96:hQVKhMnqLh0RB8fOwPvw6BGaX5pGEH/f/8E/lwQ7G3UGE5DXN/bXFdlEWSLrpaLj:6crLE8GwPvw60aXSEH/f/8E/lwQqtE57
- TLSH T11FA1AE7B52AF610401F394594C4F9682DEA912732779BEA078DF8406FFF614983B4DE4
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/DW.resx
- SHA256 aaec18b51ed50a54c4e23deb5f53b82bd8d9e228310fdab493f8aa5f418c0304
- MD5 e8328fb09f7281563995a8f598bd1ec7
- SHA1 29254f13e5ee4c6b04c9c02af5b2de762771b41b
- SHA512 26dd29bcce2ef6356cb6659e097dfbe18f4984f368c88d7cbd00f21ea74ffc3b6172d7d29bc323e72c93298b5b0f0a0acfa5a28d04fd5fde5ba65418870ee2de
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvcAbap6:KjrbLPD9sLvIzSvKgIqUyawbaE
- TLSH T1C9C10145B1C1DD260BB3482CE6527988F7A8923B02356C54B4DC661F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/DW.vb
- SHA256 e79b2f0039939b39916098ca82d883ddb9280f0d58ffcef5bddd449d62044a37
- MD5 95ca4288ef27403a6663cb97160c32a2
- SHA1 b471e11744f6465844f44ac651d1c32ddd0a199d
- SHA512 dc424ea01b2e18baea86b0698c6ffc19cbcefdea2e5888312ab252e8c7365c463409d1750226043759eaa47b16cebd9ee882cfe1ace8973dd5be288bdc162112
- TLSH T1E861F15735C701B680FBD99A8C06E0A7C6814917737B29D0B4DD12A4EFB175412BEEE2
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/FURL.Designer.vb
- SHA256 aa86e0c90e27dd5918b0b95617e957fb57daf7474f190645825460e79011dacc
- MD5 58e7cfc09b60274f9f75b650fe3c5671
- SHA1 ce055ed4e57ff954b6ad4841ffbe10e189db4b71
- SHA512 544a99adccae86d11871bf9f5810bfc0588a3da3be1e963bdb657a4673a701f9cfd6b7a49228c8ad4b9880aab42a118ad4d7de5be174dfca36b73816e77636ac
- SSDEEP 96:hOVKhMnqLh0R2Dh/Gd5jrdOYAuo/3d5je9PyNOGWGECfIslGmIGEPHyOBMvKQ/lP:scrLtDh/Gd9rIruo/3d9edyNLjECfIsJ
- TLSH T14BB17ABE53AF511841BBE159482BC082DEBA02732335ADA934CF8550DFFA15983F89F4
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/FURL.resx
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/FURL.vb
- SHA256 79cc06c5c09e392f69ec9a48adc250e4822f88ad52ffeeae991a1c4b72922c3d
- MD5 27410daabdc2f0350f353b89e29048db
- SHA1 60b3895227595d773975c4176cf3a3527d50c2ba
- SHA512 76f710a7dfb1a3413e96b46639b474b9f83efa132d21d4bd638ffa5e2ddafbbbfa8b7ab0c46f0f9c0ec065717a3151326ccf55f6f47dbfa64984b18ce45c1842
- TLSH T1CD319E67B6CF92BD0076A8599E21E046DFE100B3231D3CE4B2CD8AA09FF55C852ECB51
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Form1.Designer.vb
- SHA256 08596fcb0d57d08a82f4db7479ee853373c459ee2ee0cacb4b737dc62415e696
- MD5 9c074d4c9d5457c62f430955ec9fbd44
- SHA1 ba11b3e07679e54d728055e84fad2efe3a0cfd7c
- SHA512 30e2f3c7777ce22c6e9b572f859f03d314ad8ddd2bf253e069f0e2bc45fa06bb7e3c57f43941ca3ac101324b7dc22b13930b6403cc6c056c4a1dabf9743ffce5
- SSDEEP 768:vrVeoycwvW5s9hNjmX8NPSq9oQ4+2CaGPCavTsumEFvINHz1z+zZDy6kcFrImR5X:yeMVMxm
- TLSH T1E923CD27819E91C9DE7687B21D87441BEE18A123333866843B9D4436CF7D2CAC1FABD5
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Form1.resx
- SHA256 1fbd05b8ab658fc74b0ba0f5df3b794e362d6eeec6080cb75844ef53dd01cb9c
- MD5 90f902437aee9f4ecc2c5d15f4c2f47d
- SHA1 80d9e54b1923c48911b627a6cc7106ce0d297318
- SHA512 cefd31b89850a42f9d07bd58eb08e610b8f5bf36f3e6c4702568a7739e2bce80108046dea825ae7ee5319146bf4ada08534e348331ece80fbcbd345ec07b4731
- SSDEEP 12288:KxJVH1aWp5E7UVppZtgaAWzkJOKKKBNIkU75Dow+:AV8W3qULpZtgaTwJV2kY5kD
- TLSH T14C356355FB127422B7BC29004D2804E1AA067493D6E91E28340EB967DF257FCF9BE17E
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Form1.vb
- SHA256 b6461e2607c2543b10e4b37457b050d649da7fee86053bb11ed8d3793b20f065
- MD5 179bc45aed229b4059f71fa7387d6008
- SHA1 70319c37ef4e314e7770ea7179849d35f683e63d
- SHA512 6ce7f712131a5d3417944be0c395dd0885c1bb7ed51cd2e15e59a0a7ed5d3161c5db3a10ce7f2d1e45569cfaf3297976e5b934ab97536166145ffc85e2efa72d
- SSDEEP 768:4gxidXm8d49rGTAZMEfPAd0Ci+uBPP62hduuG:T/8d49rGTAZM0PAd0Ci+uBPP62hduuG
- TLSH T152C2512A7C8753B9C4FBABDDAC11E0DDFBC2086781391888B4DC42545FB51CDA2EA356
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/FromLink.Designer.vb
- SHA256 882bedfce75f538915ac2d0382d5df3c01bd4d66c53718d455e5c86f70a962e6
- MD5 d036db70de07caf0dcde7c1fe14b4578
- SHA1 1caec56faf26bfa837d3a9f457ed800cc2ad59d2
- SHA512 9dd0a6885d7bbabf2057efdbcfce96e8e80652dd67468db551cfccfff4f2ca7ef47b4f3705e77b45ec1837e74e0fb87f51e8b4e1a3fb51ced334782acb16cbb6
- SSDEEP 96:hhZVKhMnqLh0RKQYngjQ/lBMnbQ/lslGmIGEPkoTNOGWGECuyuo/3d5jemyDh/Gj:BcrLBQYgc/lBMnU/lsYmBEPkKNLjECuE
- TLSH T116A15A7F53AF511841B7E15A482FC082DEB602732735AD9934CF8510DFFA15A42E49F9
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/FromLink.resx
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/FromLink.vb
- SHA256 cc613192eb5e629f4c5146f94751eed5b38d9bec5c06a3fb0bfe02abef0ea316
- MD5 ce9d860490ca7e2f7696b33ded04008c
- SHA1 810b9a934fded501dd67da14f29a1d49e2507f09
- SHA512 d8c1af4114a9961cb376c4a647478c84975524245e1bed236418e4e9fea90883eac3d14085b0214122cd02c38c2418e2a3319bca3aaa7aa8f5add09bb00f5402
- TLSH T1DE01A757B98F527D00B6A0596E26A487DEA600B3517D2CE0B18CD9C45FF86C462DCB91
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Manager.Designer.vb
- SHA256 b15b7cbc5d9445bf678a825c0659e52018ecf7d8fcfd3b305fe3142f54fea3ac
- MD5 d8ded253701be79bec27392fd8878a19
- SHA1 f339d2a483e9779a5719e7c54031d457eb666e2a
- SHA512 0c9f6b228b2b1b713f4f6c58dd93cc48d696eb043bca46882e3a8d6729f6b82882405a15370e08f37045696e94aedc17c7089796e734057176c7691940bae46d
- SSDEEP 768:prAb61uCoZFcWNJd9Y0W0LRjTH9CkDn+t6+yvMSQSoCBE5bTKWhoHUjnhhLRciTB:+XtAQcX
- TLSH T12043DC3A116F514AE9B683B74DCB8596DA549133323CDDD0388D841ACFFA28AC2F5BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Manager.resx
- SHA256 0289838696df0fd6c6a6277ff8d56af1c200822908fcef00d0f853a02f6dde35
- MD5 f2780796cf546fa4cffe78e13e414381
- SHA1 c2d4f9532e2d3e0ce165abdcb2c53ff8544f76e4
- SHA512 c3fda3a8e8846d1f7a18637170d660e0a554afb160e1a1505add0a46bdeb55399e80059ce8ff58073b3b4fcbd4b90de95bf3a1f5a02662d410b2122fc53c6d18
- SSDEEP 1536:Kj2v6yxORVTCQxHxG+60SQTJkChIaW02YGeG1jhjm:Kj2ZxXQH4h0SQVlIa73GJy
- TLSH T133633A72B6C37D952AB50E059D784CC0FE813457A1A40E58B0CCA527DF322A6F76B379
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Manager.vb
- SHA256 9bda241715ab4e4d0e3b8d340c361e16682fae7c6cf30a03b6e34c424c982868
- MD5 5c98e120cfbece13f26a8633452b3ede
- SHA1 0da6cee566290b688bf27860ad71cdb80cccf2e6
- SHA512 16e2cad641807a7de9d16e4d756daee8b284157b0ee93a0964fab4bbb975310ff7aa85971408febb97ccf34c6228479fd1036b60c0a6ae601baa959179a2f06a
- SSDEEP 192:Rqjaa47/l/i/W/c/4/LK90Swj+A3wC2GhrpRE7oNIY55yW/g/Wikmzekgyi/MF/I:RqjaawSHYFE7ENDKkDyqb99H7kkRmI
- TLSH T1B63321263882167984FFBBAD5D9AA0DDEB80041781356AF4F5CD0906BFF50CCA2F9794
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Mic.Designer.vb
- SHA256 e4d892709f05d4fc00a2ef9227ead5a5bad1c61b82a29621777dfdff83285ccb
- MD5 8d9bdc7b6e9b1c3ed0b75ac32e169cc9
- SHA1 ae00277806662a70b77f435a95740e4622ea7936
- SHA512 ed6860b23041325be6d05f82824b7c2b912a09d128213b74fcaae5a0b91f4b024d7508253055253ec16918a3aa69a0ef7dcdc3518ce468c79cfae847ab7f4b2e
- SSDEEP 96:h2VKhMnqLh0RB80t1kGKsIGEko/US0QSC5jbGE5Xg2Q/lDc/nuo/IGEdVrU0nGBH:McrLE8Q1tdBEko/US0QSC9KE5QN/lDcT
- TLSH T1F6B1CA7A53AF412419B7E95A541BD482DFEC0333233AADE038DF5500DFF611542A59F8
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Mic.resx
- SHA256 b7c6e10ba04a2ed3b833c7767a68650813af9e83aed6e5654ec92e53dcbf3d76
- MD5 ab0dfaeab7f7348d13389e3794396812
- SHA1 43bfc459296ff324fab5bc8b486d40debf00fe83
- SHA512 dfb88d4336f37b9d6f0b76d7707e87dcec4ffd50567957c0efc76d65a5470456d2aaa592c96609ec8b44e52244da3dd4528e59a8fc5a287b766ee6fc8476b55c
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvcGbap6:KjrbLPD9sLvIzSvKgIqUya2baE
- TLSH T1C6C10145B1C1DD260FB3482CE6527988F7A8923F02356C54B4DC661F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Mic.vb
- SHA256 4ffe9b1511b460cc6800ce8fa90151930d7eeffe49319fefcd0ed41d258a5e01
- MD5 d1abbe63ba7c9c47d7971b644f88ea30
- SHA1 9f6e4ca8d35e0e0002ecfc071c89bcf3880830cb
- SHA512 83e32cc542d0e007168f98853e111511baef40e945df33890fcae416a2b0d38f344e80337fdfea8ceec37cbbfd58a934ab1265d10f938e449e0271c5f720b4b5
- TLSH T18B71F0273989417586FBD85AA826D482EFC11613533E69F0F0DD9056DFF00ACA297B43
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Mynoip.Designer.vb
- SHA256 adf352551d2afb76adcfc0b8fb078b4edc5415ed0d076e51a09c038389963405
- MD5 3b7809b691e11e6078215bc2f0ffc6a9
- SHA1 e9937b0a67da7243edff195e7e80f95742da4e59
- SHA512 20b87b10986ea4a4f81287d8fff726d89821a731c824153a4a892d6cfd6a714a414f37422c31d18d6965be35079410f755685cef1720f3d2f2517070ac6dc42e
- SSDEEP 192:y3jrLU68uo/3X4EEdrC9Dh/GX4/EEHfoXi/ZX4iEb6osYyX4gBEPWINL+X41ECgD:4rLU68u2X4EYrC9DEX4/xHfoyX4iy6ow
- TLSH T19D027B7E53AF515C41B7D196482BC082EEB7123327649E9D34CF81249FFA19D42B89F8
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Mynoip.resx
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Mynoip.vb
- SHA256 82cb147d178fc79017af769aac0eab9405d9a62fedb8c6759c554d0369c06e85
- MD5 a1ea3241b410facc62a4138b19a94f4e
- SHA1 1a89d5181a9eee76bd2e9da2f8c4ba22d668502b
- SHA512 95800405690d4638896b9d24f9607103c0d779364541e57e6c1aaf2269747ca989401b66a052877bc6ddd9fa1b96f6f935e7aea9b0907fe5afc45f81a511c409
- SSDEEP 48:cIQOPAU8sITNKmeHSK8K8JX9PwGtSkfkLRG+bfj+tFFxGwaBYh9I1K57wMI9:cIQOPAUqTUmwD8FNpib2FSrg9IxMI9
- TLSH T10291EEE32A0241D9C236444B04A969B4FE60567B9F0BCA58B2CEF0BA1FF657DC0D1376
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Note.Designer.vb
- SHA256 fe32c1794f6c4065c13651f00f56871af0a54634f87f63222aa272a35ad03cad
- MD5 8240ee4479804c280138abaa388c3968
- SHA1 2a28ab3f4179a2574498d30a7c3229094c011043
- SHA512 4d382d5b5d8f95e7a98cbf49f74378c47d914d366c866d77eb2edca2df734197558fb136587ef5c3566e803323f6313dd2ed3a0ff56b2e7a3eece82531aa4f7d
- TLSH T1A871AE7A429F811940B793EB5E5B80A3DAE94177233C8A8474CE851EDFF614982F4BF4
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Note.resx
- SHA256 7f01c5dde53c3f6db435f15a42f3b336396a7ca5734c73fde308192df8e5bb39
- MD5 e0130859edd4301f6a0eb388a1069e99
- SHA1 a8a8c1366278dd3838b92992a8ada908efcce989
- SHA512 381e93579fcd2323f3a7818f4004065066aeb8327b90cd3fcc51f2c67497f182b10d99093d2602699ec9cf0091755c493497653d8b12d69ccf71ac3759ef2ee5
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvcdMbap6:KjrbLPD9sLvIzSvKgIqUyaebaE
- TLSH T196C11145B1C1DD260BB3482CE6527988F7A8923F02356C54B4DC661F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Note.vb
- SHA256 46f6661ed74e57427b621e037c5810ea1cd498e98b43bf44afae64e538844f0a
- MD5 db94dc343c268722c35ea01bb4529ba9
- SHA1 165d3a7ef29f4a735751f78f16358f11ddadba02
- SHA512 9209959231dad823040f3d23736e2eb8be09d38de9c7fa388b2a47bf61b003b6f8258cd111b7b9099ff731f960b61735591f25095a694ce43bbcf50bc5531b14
- TLSH T13021B132154661BF0D7B4B1BCE80D05AD9A104131275B6E830CE0A709F714DC93BB76D
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Pass.Designer.vb
- SHA256 f1b474a85af58d52a62502a552f4e2843660fad843c5b467558edb8e764181ae
- MD5 c546fc23d9ef7de94b60b030a278bf09
- SHA1 fc3503e3e20385530a69dfef7bb9143283fe64cb
- SHA512 ffc2e48df4dd9088f338511e5c35b55a0a70c1988c87a62730267fa32adb1da1b1b866ae8073e4d14b656840ceff769dbb4c7ad114b4bcc3b9ff95d97750d228
- SSDEEP 384:/rLE823MGC8dQPMgbzymrFhYs1Tgs9bRAFm2+PUxNnYwyxDzLYElNYnHBGZWBfe/:/rAaGCrP5zBhlTXb2m8x/yZLbNYnHyWq
- TLSH T14242B07E019E524AE4B683BB4ECBC569DB549173223C9980795D840FCFBD18AC2F5BE0
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Pass.resx
- SHA256 ebeeefbbad7249533d37167a96782974596f556d0adc76e00a7080c91216fb19
- MD5 ae83cb0799e74c09ff6bd915e9208111
- SHA1 adcba0f517236d51a0bdaa556470893ba58c829a
- SHA512 3a7ec2e8cb2c3fa8664b0e3b7867995a7d04eb497ed1046a81b167f75725f067f556250d740e1ceb45596e58fc19dce4121fad37262fe9b281bc13ae474ae897
- SSDEEP 768:KjXdskSv6/ff4vP88ZB1b1UVropzS98h7qONGj+VK06r3ij:Kj2v6ePN156gS98/cF3A
- TLSH T18BF2C855F74274937B741D044C2811E5EA4524ABC1B92F24B98D842BCF713BFF2AB2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/Pass.vb
- SHA256 fb1fc2a7e38c0959f37c67bbda4c6160dc5bacb37113eb1c6dbef76399fcf6e2
- MD5 d3ec353702e6bbd1b89aa28c4efbb05c
- SHA1 d5b6460ade1384b413758cf6400fe65eaa4b15a0
- SHA512 c2df3d3ab87636e5ff947b7d48eb0c71d1bfda2339849c172977f924239a00db484ff555e6f426f0212872def0a92870d0312650e39aedb0dcca6ba652bee1b2
- SSDEEP 192:RqaJb/zyiGjlbzg+/+H6BbvSmXLM6tpnbvfjg/W2K:RqaJn6zg+/w+xXV2K
- TLSH T1152232163C47237AC0F6EA5C1DCAE098FB820A67A2B66C84B4CC49559FF90C5D3F6356
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/RGv.Designer.vb
- SHA256 3eaa53aeeca5d10aabb2ed53014974b1a60de5beb8ec37d7b75479042f1c1b2a
- MD5 ddeeecc02d3d343612487d9ab3fddef8
- SHA1 0d390da9d1b48072e5b27bbaf0993ad34c5ddba6
- SHA512 34ca70ffe16bd9e38832da7f39fc7601ae132c0545776d22061ee91113b899c32911cefbd45f1c3bf8c5ebb50f7607a807c5cab25b88fd3dc495a392ba536c83
- SSDEEP 192:IcrLOuo/BEd/mDh/yEEK9oXi/PEbg5sYoC9gBEPUtSW6C9YEBE/gTQqEC9KE5i4d:5rLOuCY/mDkxK9ouyg5sYoC92eUtSW6I
- TLSH T1E1D1987E539F511C4577E55A582BC082DEFA13333364AE9834CF8520DFFA28942A49F8
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/RGv.resx
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/RGv.vb
- SHA256 fb8f00335e84aa63e254a4fe392550da36894c18077511da82df02048f988a23
- MD5 c60f32d27f57839011fad38f1dd9d86b
- SHA1 288da6bcb237f0e559b0849e57aa4f389cd9cc54
- SHA512 542161ca236577da366ab15fe393655a0eae00e1784166b9438613542c5043dc352635d582b287f909a3071b97ba1bf043efca71a7e3f1e0b66012157c58a2ee
- TLSH T1AA319B31BE85A1BA1B7A6F1DC969D084CA981103A9788BF2F09C03E17FB20CD7171F56
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/STNG.Designer.vb
- SHA256 1452d9fdc128fb5030419829ce2878f61a50b6eeee33a2bbc484fccc6a986954
- MD5 906d8f29465c868028747acc2556712d
- SHA1 ba457bd57b7821aa152af4b025a5552e0f695752
- SHA512 a185cd3f160848ccf89f86375cd080cfb2c39e4dc1c670ea95125ab097a69effbf83c01fbb191140fb573fb7712802efd19f459467db800f76f6b40fc899a788
- SSDEEP 384:yrLngMap2WOhbRTHfhUEnU/YoR/Gustoe8yoryeDGdACku08MeUSlw//+hcbHJup:yrjgoWKRVUb/YcGDodBr7GGuCeG/tbH6
- TLSH T10D72DD7F929F41944577E09A580F9492DDA912B333B8A9F030CEC410DFFA20E52E5EE5
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/STNG.resx
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/STNG.vb
- SHA256 7019c54a20dce2a35ac6818b685bad63f35ddaa591fa4694e2efc98ab111e757
- MD5 f8250d41c26f6599ab7c505c910c1c81
- SHA1 1a331fbc483b89b8a64c49bca08c640c495caaba
- SHA512 22f85b7093821c5af3b56e4cf721f3a69a7ac1e6fad2e0abfbfdee1920eccf913784b9676c03d7fd9e76ff0496266ccae52e2f94f34873f89747ed30d06bb7df
- TLSH T18A41E935109B4DB22A3F49C26849DC4BFA4316D7FB591AD072FD06304F7C8AC916B78A
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/kl.Designer.vb
- SHA256 237780f3c13bc5a55066409a6c39aaa985a93d885169d1cdc13e49858768ea56
- MD5 1f3b7deb7d851ea9c93594b3b457d9a3
- SHA1 35afab473c27ee1b78c80296233e034d30dfe0fd
- SHA512 dce38340c5c10f5f019afae27a3f2b5526ee64899d6f5dda59a98b3edf07f6413f31b3c8bbda847ebd04a58c1d1488c9d90053dce05e3ce6e740a4d0f8dc15da
- SSDEEP 192:8crLE8HwP48Bfb/plsI8Ea3NaE5jU1FEWtqSMGEau+h8AgfBVCKQQuYeOikLlakl:NrLE8HwP48Bfb/plsI853NaqjU1FVqSE
- TLSH T1BAE1BD79015F5149E9B297BB4ECB8066DB984167333C8A9474CD841ECFFA18AC2F1BE4
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/kl.resx
- SHA256 bd1c0eb06d47170e2c6cf75f37425863cc528316ac8964dfa2fd601f42d52a60
- MD5 dc52cc55441f757a689018001319cb4e
- SHA1 38b43c02d7a1f7edd6eb1c684db91e8227a67666
- SHA512 233bba5e085a2f0c546ab4db9dff48ffd46223ffa5cfd25da8e24c91c9d58ce8207425555e6a3f38e3913d656eeb347a2269b112e80f098ff8f7244808db1dd0
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvcdMbap6:KjrbLPD9sLvIzSvKgIqUyaeba8baA
- TLSH T1F2D11045B1C1DD260BB3482CE6527A84F7A8923F0235AC54B4DC661F6F72C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/kl.vb
- SHA256 8ce9ed80268ddd37a7434a8e651663818d5e5b3a8497b7d2983dc7e5b0be148d
- MD5 fcb428660c135c01c38243bfa1a639f9
- SHA1 cb141347bae758318a31e2c729bcd558294dc1e0
- SHA512 b63bff94fdb92b4e0cf58dfac98a2359492b6b11b8b0c90ddeea36a60b9426c1d76995c17eb9b10931bba4be0b94c3d8c77744c8ccace3210d299b2229e33cf7
- TLSH T161519E2375C961FA81F7CE479DC2E197E6C6151712382DA4B18CC9A84FB46C091EBBD3
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/notf.Designer.vb
- SHA256 27577dd12fc4610b81b818c7074a3baf70c4f62b8e505b5a012c51e60346167b
- MD5 ab5243385c2a1a9d70d7116ca02ad4ed
- SHA1 3059a46e0bb5d0b6ec65fcfd11e1b6dc22f676cc
- SHA512 3dc5dddeb624f09536513ab6bec0ff46757b5892ca7e897e9f2fa7f50c318c386812680e4d2c2cd05923f123b93a42f7e422ad226cbf3b43b1bf18793830b5a0
- TLSH T15F41207A52AB822044B6C4294E2AE183EBED157327A64C9074DE4404DFF712483F8DF8
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/notf.resx
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/notf.vb
- SHA256 40ed95700b3b573787052b43bec2a1a318a742b6d472af76a6162cee8c365537
- MD5 d40a85999226b2eec44ab6c009fc31fb
- SHA1 c921259e3d59bba47218cfbe40b489216eb65a1f
- SHA512 add73f45d2db0db28c50501ba9e9bda86634d2a582672521c3150559f62176d6174af5dcefe4e121f19568ec79e46a158e07a81db55ee9f0399cdb5e15d534c0
- SSDEEP 96:KTjajYt/yaG/8hEwu2npbN/1dVhdvvswCvyEod3hkm33tNJuxZBxcYrD:WjajYt/c/8uIbN/1dJvdlEod3Sm35uBF
- TLSH T1BCD1742A2D462BB188F74C197D77C44EF7501443C1A6B9E4B2EC83311FF40E961A5BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/port.Designer.vb
- SHA256 2edeb38f2c5f2ef38625b0e33f3424d39e80869f7c1ffe7e0441761008508a8d
- MD5 47f07567c0ad0157e6a3c57aba28e58a
- SHA1 5fb9067f9593747e778ac482ee2b917684f1c788
- SHA512 ac110ec4742a5a884eb696565cb63e51a26fa879bf0e8a2c0774b864eb60e31d8b6efa341ef7745fa8f9d0b003a4cf2ebf3df65677865d9a87c4b62b7cbe9d57
- SSDEEP 96:hGVKhMnqLh0RmslGom5jgIGEPEoyZCTQSc5jszwQ/luo/3c5jeXhCBec5jFiZQ/8:McrLNsYom9gBEPEfZCTQSc9szv/luo/H
- TLSH T112A1ADBB53AF411841BBF159482B9082EEB602732734BE9934CF4510EFF611543B4AF5
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/port.resx
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/port.vb
- SHA256 ce27f13d1c34fe96757ec6868e38da78a21ba8038e8c07d27a278d792e1cff26
- MD5 9c6a391d6d30af3b833eebbbc86a209c
- SHA1 7a19c8a9a0099f2ce0caeacccd1511eb5bee809c
- SHA512 f8d72c3a5ee2123050308febb948565dfa3b1a460c6fe11cb270a808d8588376452c9aea6cc78d72e9833ae76391e8e7892e67f6912d7dfd2016d12181205eee
- TLSH T1F5418A576ACB91B9007AA8599C25E003DFD50463127838E4B1CD4AE18FF09DC71F8B52
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/sc.Designer.vb
- SHA256 0f4ec33077d3c0b077728f6fb7aadef3692ed03cf12d2aca60342ce53e6b7698
- MD5 aba34890cda022cbaafb92684714e14d
- SHA1 83ac3ec12134faacffd6fa19128befec87ef49c3
- SHA512 0ef5fe1c5b0e0bcebdd5dd1bc2d2ff5dda067dddeb4ef39e3db72701c95c010bc711668a542310834a989ce85c26c770c4cec12877e97ddab1972e875962633b
- SSDEEP 192:/crLE8F8mL8EHR+pjEDQSC9KE5F0/luo/3C9EEdmoZ1tVBEko/BTqH//KBECLIke:UrLE8F8m4EDQSC9KiFGu2C9EYmoZ1trt
- TLSH T1E702CABB42EF41545AB7E45A580BD583DEA802B37379AEE034CF4010DFF614D42A69FA
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/sc.resx
- SHA256 887d5f3e2cabf3cd5aee3b37756bf573e266ca66e81f686318e346d4abb59463
- MD5 25977df1dc15c9de1fe055c8756b5646
- SHA1 4375fbd3dc204317652b6b9489624172901b9bb4
- SHA512 e02096fd2d469815bdf1e7ffaa7f5019e829712eeae7f1283582c35eb018d8b959db11641f9e23fefc7ad115e845fdc1b9138a27aa9c5c5057700deadae1f4e5
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvcvbapGl:KjrbLPD9sLvIzSvKgIqUyafbambaM
- TLSH T1E9D1F045B1C1DD260BB3482CE6527A88F7A8923B02356C54B4DC661F6F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/sc.vb
- SHA256 29edb070087741974da1de686360bfa850e3ac3f33f9838d5cfb2b64f510d8fc
- MD5 09b9284585150e12cf139082786e5821
- SHA1 c5f97765ce981ed86f2d0f885831c8f61889e077
- SHA512 ede3ed612872b6dd62e1a6411adfa7ac2b3c1b1cda612ac0b2f56ba3f9924344787e625563d9c0714e1eb3885c3a5172468eb05134025beab92befc4a4535d55
- SSDEEP 192:WaJOph3eNu/Rgvu/JqFnMPV0gt/K/EUZFnMPbLgRCkd+U3OF0Ha7FB/ol4Aa/iIl:WaJWdI+VGPOb1FZijI8VnySLAf31L
- TLSH T14F32326B7D861679867BE6699C06E08FEFC00463417969F1F8DD01A16FF00DC10BEB56
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/script.Designer.vb
- SHA256 46341a70dcc8f303a525caf02ebb20f6663d9fed1f116d668c64edd018a24590
- MD5 a0a612c69a61b552a2e823248c9b7bca
- SHA1 ebe149a3754d8751c25fabd83a01d735154344ed
- SHA512 36c351b2f5bd683ee2fe1ce74d8d9a9ba820d02c537b2c43ba70b506ae72949a021d81008bcb69eef5bbcac01037faa6d70fd7594d47840b3295ce5babfe7625
- SSDEEP 96:h2VKhMnqLh0RSmL87j8GQsC5jbGE5IzQ/l1kGXTsIGEko/0OOslGeIGEPF5F/+o2:4crLzmL87j8GQsC9KE5IM/l1toBEko/x
- TLSH T126A1DCBA42FF811851B7A849581B9482DFB912732335ADE138CF9415EFF214843B5AF5
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/script.resx
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/script.vb
- SHA256 70ea841e107a363b4618c31a56f06ab83c7ea1b3a8a08275c7a70a253f3f4b96
- MD5 681ae71dbe5acc9c1da26c0a952b89d4
- SHA1 a701c0c5f46e1b8df91bfa59c358184fed261b7a
- SHA512 f651fa99c8e847c5f10ce236413244d39def999788d50da9ad1364ff6a803190842bf2ae75abd8e27ed086d65478d915b9b1908e1dbf42134ec96f41d3956557
- TLSH T1E601266212CAA8A50175DC0AAA81E053D6C401273319A9F0718E4761CFB285863A5FB1
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/up.Designer.vb
- SHA256 bfa8bcc4c14eafbd711690c4a0afe3209e0c57198083eb13e24c6dc74ea32d5e
- MD5 e1b1307b547e8a030e6e684f570fbde3
- SHA1 ac50615455838d764b2b3f3f2b692c2d6d4391a6
- SHA512 c2df4d25ffd5948cdff27586893243ddce49f6280215450cd86d68ec706fb1463f4b3eefeb66c33ce9abe45a4f34864bd45dda3e64a7e0b88c30fb27db8da77a
- SSDEEP 96:hsVKhMnqLh0RB8C0wPGnQi1GE5z3Q/lDd6BGMX5pGEH/f/8E/lyEWqLrpRGYURa6:ScrLE8bwPGnQXE5zA/lDd60MXSEH/f/Q
- TLSH T129B19D7B52BF610401F794994C4F9682DEA91273276ABDA0788F8406FFF614683B4EE4
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/up.resx
- SHA256 b7c6e10ba04a2ed3b833c7767a68650813af9e83aed6e5654ec92e53dcbf3d76
- MD5 ab0dfaeab7f7348d13389e3794396812
- SHA1 43bfc459296ff324fab5bc8b486d40debf00fe83
- SHA512 dfb88d4336f37b9d6f0b76d7707e87dcec4ffd50567957c0efc76d65a5470456d2aaa592c96609ec8b44e52244da3dd4528e59a8fc5a287b766ee6fc8476b55c
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvcGbap6:KjrbLPD9sLvIzSvKgIqUya2baE
- TLSH T1C6C10145B1C1DD260FB3482CE6527988F7A8923F02356C54B4DC661F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Forms/up.vb
- SHA256 c46c90137176d72f55ff1fe9c67a7d997e1b4e886b693c4bcb1cd70c5e9dd44e
- MD5 5a4e47ac4650a758715f57f0f5cc2089
- SHA1 39085a4325cd398e425966cb96b1949b2fd16bea
- SHA512 bfb8a3f61d723a07c674807aa34c1b12d24e7a50ded8044274b4c5bc1e13ec2075e4686ddb5c3f28e22266d668460ec0e892bd5813bcc0bd9ad4aeb40d5a62d9
- TLSH T19941F317358702BAC4BFE98E5C8290EBC791050BB36B2AE074DD01A4BFF1058527AE91
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/ApplicationEvents.vb
- SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
- MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
- SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
- SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
- MD5 SHA1 SHA512
SRC - NjRAT 0.7D/NjRAT/Modules/Class6.vb
- SHA256 60bc117329a2f6ef943ab1c859c053654241a85d8b002ad299fd91de940ca00a
- MD5 c3de26d70c0f798821fd370827ced36c
- SHA1 c728eca5ee684235b8794748204695f0370af690
- SHA512 b8c16d0f7d8f0de51e365ca63a2239a1b2512f9b8daca2f287ca3c4219b27be04ec98b48305a1781deefe65ee38185eda10ec70a083af186a092694f97e673fb
- SSDEEP 96:KSTj/SqoHolx2Byfh+KJ2pps6Tp8/Fs2Nu7TZ+OyBqXO2vpqXdunP2ZQvWlrTbZu:RgHwHPcsD/i2BbDHUiCpuQzEi/b
- TLSH T161020F193D0292790AFF9E65D89BD40DF2E2205350BAA9F0F4AD99A00FB10CCE935B95
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/Class7.vb
- SHA256 3b4c33f5b73cb40ab769392195181068e5a70acf0fe2419c10a8feed0012aba7
- MD5 96b612d9a449cf907a7f3fa751f207aa
- SHA1 dae5cbb767c9474b5c35374249ab9eb53996bda9
- SHA512 033338b1c45fd51dc4d6b565f32fcfa4f4754ba49607fc81375584bb5df2821dc357192684a0a7401074ae442bb5cd21dc8a3d48999d24f9a2a7fbfb5c736842
- SSDEEP 3072:gy72025Vb1gZfEf7HfX1wEfipVfSNCfgB3WofEZAh7jr:gy7205YN3Lr
- TLSH T178A38227344213BB05FF8EC62E5AC044E9821D53C07E6B5CBC9C89991FB25CDD27A79A
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/Client.vb
- SHA256 81eebb2422ef35ae5f595a1511beba794cc2f3e1021f50f9daacce61a1533fe1
- MD5 e6f22e5116e797e9e2b792cedc6ccbf0
- SHA1 e1b8b369b920262d9389fbb9707d4da61c249f27
- SHA512 ad5cce43c707a22b8fb181229ea17e2421936535e89239869bafa5d8a4e1d2059bd63c4455a8530850a64f7540f862bbe41eb84479da59725a121179b3418a49
- SSDEEP 192:RMJ4Avl6IeyuFH/nCGPhD/miyhc//sLRNbSBsB36oFj/n:RMJ4AvN8FglLRNbSBsB36oFj
- TLSH T12F822C5B6E42417A98FFC8195439E486F1A31A23A3795CE1F0ECD0818FF08EDE255AD7
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/GClass12.vb
- SHA256 db8edb53cffb8fa8c49415a228e1bc8c83973b7945977c7997c87c5f54bcf340
- MD5 39a187d788958fca903c8048e171e63e
- SHA1 01f036fa331557b502e12d7d388bdff561ee4d0d
- SHA512 978b073f001a620e65076e3bb029f856b7e7689288a4705a7bbc07ae7c8aacc019e916c0f21e3aebe559fa425e37129381de006fc0de1f87886cf9eb0fc3fc9e
- TLSH T13DE0D8111182F6B54776C609C545D052E5B24443651E66A8B1BC039E9FA1484633857B
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/GClass2.vb
- SHA256 f44a036c0c8a37a789c720cb7424a9a71c747052afa295ca9858b93d7d344f3a
- MD5 12a7ed62150e06d1769db1e57ce600f0
- SHA1 58d10eef23dc85d5ea385ab81ed02f97dce994bc
- SHA512 968fc8e2bc42ca81f9399c83c57119ce0909b4aa9d2b3762403de455169b6a7b0f015adeac60db98200110a33f49075420a10c16e068c658670ff1cfb892bcc4
- TLSH T1CB11CB192201F03416BE093BDCAB842825B3486659C02E607D38BFBA4FFA4CC8D35F04
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/GClass3.vb
- SHA256 d3460b003c5de54a6ab4ba0297e475a35fe1f03082120f3ef6dc58956ac93dff
- MD5 abb774aa4c3453b9ce72e94bcc5ceed6
- SHA1 d3a35c1b86bb0a34f4dd3de22636d71bf75f36e1
- SHA512 be6b6467631e8d93471eaa4c3e2811a2ecbf2239a4155294f3e0eefd885ce3dd41908f438e9cfb5d381e307bb790b7b0697507fca293eef6be9f8c230fdee486
- SSDEEP 192:gf8PZngxHG9Zae1/3bswunulYswunu9RybFZRMXgmR6St1evfmglzxNc91IoNMg/:3YSabalc917tiUUIxYvVxOMyt
- TLSH T114D274652E42507782FF8D74A827CA46F6A6254391F869A5B0ACCDF00FFC0DCE615B4E
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/GClass4.vb
- SHA256 4f7e51b1fd96c0e2f45ecc9d5dc3f051ab704c9977f1768ba3de3a2f9ba16866
- MD5 c0234aa54c47b2c40f95f9e7c31df10b
- SHA1 dd47a8906115e4f87c525a2021aaba6a7b13fe33
- SHA512 283a8c7ced6226188e9656b8634b5264c64aa7b44139f685db65982b24ad0af7ed3569a87c4a9dbff2f183fe3ad554d82d591d58d9f32de2d7787499d50d825f
- TLSH T1D8F0E98A20C366340D7E9F74C6A6509AC59100434235BDF0F9AD07959F7048C263165D
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/GClass5.vb
- SHA256 d0a0ed65fe370e101f336708413cccddf3b5255d6a6f8fcbc5578787b5e6a656
- MD5 9cf13044c8243d717bc8badf87ef23bc
- SHA1 9622d2eddca55f9e8858249125d929399d6ea019
- SHA512 a4d3a05ffb8555d3692aabfa54e4a5c558359e2f674f589ae70fb14e17f3fbc27bf8e1bd3821c6e71d06fe8a7b980eb217db68537e8dbf0dada9cd1ddcf8fc5b
- TLSH T1B141E62926014A360DFFCD204467C1C6E852205744D989F1B09DABBA8FF28DCFF29A67
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/GClass6.vb
- SHA256 73c3f1a5b31de527cd8d876a6d49db12a1c18427acfaee265be57e7cf05ccbfa
- MD5 89b8ad537cce4da59c7c737c1274cd9b
- SHA1 0adf7bd76a1bb33f94635d48dfc4418f4739dc26
- SHA512 d24d0c5eb853a9d480e6954817f083e63c42556468b87ba882fd7e274d014af3b1d68048d279f7122565952fdda1d550dd9370f4661f999c9e1664f696b1edf8
- TLSH T1882106AC1443357308B69E598846C056E5426017512FDBBCF87C6295CFF24D8B938E2B
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/GClass7.vb
- SHA256 04bed4f953fc33d8b604cdc6bea3f4c832ed04347344d5f13c7e4833eab46256
- MD5 0f40acc3237fa158bf3a645ea0bd281d
- SHA1 56f5ebc68642e91c7eecf2a2642d4b896ca366e1
- SHA512 0dd3276b3e29f5ede783106c801d05d381f491bbd0a78649ae3162a5808bd64134c1048563ffb3759af6e1a2f6bc344fe2c975be349699aa6edadd55e08e957b
- TLSH T18401C00939F3F6F404F68424C847806FE2520157518E5D0034AD277C8FB63C87631B6A
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/GClass8.vb
- SHA256 dbf29b2bd6b6f4f759103fe14b8c0c28be71c5746bd30bf6712d502f51ed67c6
- MD5 a75eae266c4bc6ae6e69654209b6503a
- SHA1 a0e7824f81028bec9151887a693962c806a29155
- SHA512 72a8b988dc3dd9992704f71d46e6261a5f695a25f8047ee8b9a0f55af8e15b7ff172e91eb3d7be6b3f760628c96ad330a0b8563a2bf4ccb8d5b1a18f5f050e20
- SSDEEP 48:LucOMTumycgUBX9ARb69DeRiKpdkRpw4Khjrn/CB+3T:KTMTumyJUBXkb69MgRpw9hjrn/Q2
- TLSH T1459141367E8B257041BB8C017E1A9007EBA51403563864D8B8DCC379CFF14CCA2A5BBA
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/GClass9.vb
- SHA256 d5bd260d9166eb48dc58bf372f22e9fd4fb1d581e5f61eab9defea16486b674c
- MD5 e3e65aca507dd37d0e84339b52f87bb0
- SHA1 17508a69fdd589870cd193437d1cbfcc2382d3c0
- SHA512 836578faaae480b481e5a77c91c942e634e2de2b931d6f2deb4e5fb9898980cb2cb3621129057312e85c95b427de27b8d4d7a7f2a75da8e280991226591869b0
- SSDEEP 192:RqjaS/4/R//W6+jNJ/tbEYGK2AGL9Nm6/d6/uJxAa4P97n37SryaJJ:Rqja1GfRbf2AG3meVJh0rOyaJJ
- TLSH T1D472761F7D86313441FB8958EE959585DB8118835A95B8D0FCCDC583AFF04E9E3B43A2
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/IcoCH.vb
- SHA256 b59acb4aca683fb33e11879081b7c238e791827fc8abd8a336bccc7c6192ed40
- MD5 d481913c9505f6b1bbcbd0afa8c15614
- SHA1 a0d4aa4ae9a4cf7691081f53e02f9f8461ddf0c0
- SHA512 56402e49e9143b4b796596d913971a47e171e4de944b50f4b146465d535aed95fc4b2f246072165adc75495077ff35e4fa68d8033d3458406591fcd11106ea45
- SSDEEP 192:Cn6JEnCZ8vqtCtkngNugdb+y4l9qBTNWP0COEQF7xbWHG/ZKxqCiXiocUjHYJszB:CnltytbJC4fqNmV5QF7wm/kqCiXiMjHJ
- TLSH T1431285076F0BC23416F70884BE0D6AAAEE42241B1D3858507D5D42B95FF26DCB23A7BD
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/IconN.vb
- SHA256 d06429d8e32ae48dda610cde9e8b45fe21ccc0f39bee08d1dd4186ae3ad1c6e6
- MD5 3ecdf75cf057ff3d8aec44a931c02212
- SHA1 c51cfdacb620a1a0e2dd7501c6f5464ee100119f
- SHA512 cf29fd8f1d2fd4698289b1de4078a6a79225c3ece397938215ed1568f676e284d77053ade308da7a6bb6449cb6fc0e8dd1eba5855564405ecaea6f9acb62ad65
- SSDEEP 192:yy8z0ik9+y4j9oPTdSo0CRQF7Kt/PKxPChHiocUjHYJszsM7bw:Kz0iwp4pobBVRQF7Kt/qPChHiMjHYJsS
- TLSH T1E3E1520A2B0DA43456FB4C047C197667FC8624171E286CA07D8D87B84FF23DCF62A769
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/L1.vb
- SHA256 9cc426a252a34d7143651375ecf4b2231322937dd0f8bb32704faa45610d1a25
- MD5 7e00b1c89a5868427605ed440299867a
- SHA1 3fcd1b04883464f05013a14d162e68e4f86f9205
- SHA512 b9c0f477814746a421a9e8d80110069b0922f5e3eb10cc32710ab3174187c5dfc46293a0508f728a5ec02e2f79cacfe57bdd5a5ba532bc48e563e7415aae4246
- SSDEEP 192:R2Y///1/3/Q2olj7KkngZmknQqo/y2/1De:R2xMkngQknQju
- TLSH T1AC4242077811177028BFA6E198B6D49DDFA2549B0AA45C40B8AC814D9FB24ECF1B774F
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/Pp1.vb
- SHA256 64b79251bc20ded8fdfec1fb402ec41a84d454186448c110ffed6883353cddb0
- MD5 c7d5aa8d7acd2f03f860fa8123b329be
- SHA1 3ff746644ca157dc731156685d8887b611151b3a
- SHA512 1b3c74de3b8badb16385379652a40b097190fd3be88ad44c314fb7b0371ec38ce64564d60742a0547b9fd2d811bf7aaa232cc55e1c06f68deec34b691150113a
- SSDEEP 48:LucOMXLlmycgUjX9ARb69DeRiKpdkRpw4Khjrn/ARH+oT:KTM7lmyNUjXkb69MgRpw9hjrn/IHx
- TLSH T1749141363F8B257445BB8C057E1A9007EBE514035638A4D4B8CDC3A8CFB14CCA2E5BBA
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Modules/SK.vb
- SHA256 9f14338c0ed3ab8e14675d6afe3c09ba0ce6a1feec6b3ec0ac974943a91f5e56
- MD5 c7aca9b7b57cbda7c9df1f0ebd5fd92b
- SHA1 9b1e7052685688222a1dfd471976795f8f06bc41
- SHA512 0d896fd4e8b3374f954a0496c3424d93a023904bfa8d7b85a435b1327ac6b117ff4f5fbe0bf08186f94eb10b1b0a9744bec9961593cafc43f5d06ae94d0c6cdb
- TLSH T1247153153A1236F240BF6D429C13C1A2D2701523A129AC90FEFCA3A54FF24E9F7A4946
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/My Project/Application.Designer.vb
- SHA256 f32ccc91fd182f9b92cdb0c0ab753a4f81b5aad4115cd7124caf93ee19317bdd
- MD5 326a229811170e745f2b1cd0ba9be52f
- SHA1 73db35b6a681014aa1f715d1631964096e4f7e30
- SHA512 6b4c65c7972d4b0e8ca79ccef59b942dd7fd925d272208cb58f4ff3ad8b75bf083f633a3fa524870747ba8814c264a0c2f8b840e87bdf39b0fca894d2fe9f89b
- TLSH T1693154BA2D86C6B551F3D4B7C80F95D3D833058F863D98B6B88C8389AF70718425D8D2
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/My Project/Application.myapp
- SHA256 5605000614c35923161d336908a5d48dd74faaff90177e540f1d9b3c88109da5
- MD5 8d39b4af3f919328612b64fcbf5d1b8c
- SHA1 cbbf49b239334726057f011ff11a3ea4dc3c2b74
- SHA512 ca46793fed311c87efc96bd2631c283d7b2cbba006474988462200a916ce8de86dc49e789459b681392a5b9bdbf61108c81c11abcdf9527a99825450e5ce538a
- TLSH T1C1F0E98992D1097486E2D6B6F568C9C921A3E63C8BF48CA8B4E05D8B614108912D7ACB
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/My Project/AssemblyInfo.vb
- SHA256 726f20dd0f181ad6717c019338ce61ba4751cc088b29cceaabff93d7cd7720a8
- MD5 a069840f586f624cca1238b8f4d3205f
- SHA1 3dea22a2a4090a385ab2bce45f8a56c21537ba36
- SHA512 0b5f791941539c37c23f07ef102b3fd820e5b11025fd6f7c4704b35c73f5942c42d7c365c111fb823242caac35ba0a5a0cde957c0c7ee1cfdf004dd9a650cc8d
- TLSH T18E2125E59582F7690F620193ED6FB198427C4324A3E54D6A3C687867D651E3C02A11EF
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/My Project/Resources.Designer.vb
- SHA256 84f351ed60ba966e4b018d5b0699a5be3384212b4bf24e2ae5b9a018c80a8430
- MD5 3c84e5a99b80fb1ede0a7c6873bc929a
- SHA1 3089d503c47f8eeda9e2803dad56c102e05e38dd
- SHA512 5cadbfcdf4b13e957311e4b5621609f5244afb677d3306e11265eaafc91bada7fe72ca293c9046999d7e4a46d0034e75786a4be287836169b270632be38378c3
- SSDEEP 192:Lp5JEJvG3G/cTac67cchTq1OxkLzhEVSYnXp23d3:Lp5JEJyG/cTac67cchTq1OxkLzhEVScI
- TLSH T1A712B8B30F9BC538157ADA836909F085C52002B396381D8AFA9E059E8FF22C5177E677
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/My Project/Resources.resx
- SHA256 29d288e0981367c231760387cab585fbfbf43b954fec095e306cc967ee1ed3de
- MD5 837f8355ab4567ab63b6bc58c0250393
- SHA1 843f47bc98a9c6e0479f695ad9c6f5391f9bfd67
- SHA512 b0347e8038a2e7f0c44314d2c8c492f69800de3ade46e5b042290836d41b2abf80002096d5133710137db29c6545abec293a12f551cce6012e1d5035e2f6a1f7
- SSDEEP 192:KjrbLPD9sLvIzSvKgIqUya09MoHok3Hok3PXAz7v3Fok3+Cok3Bok3frn2ok3l:KjrbLPxsLvASvKgwya09MoHok3Hok3PP
- TLSH T14E12252471C9DD350FB24929E912B9C4F7B9833B12745C4878DC260FEF7288667A3396
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/My Project/Settings.Designer.vb
- SHA256 c1924c570c39f15c7427f2a3e126295893ad0190c2807b463d73c1dd065bae51
- MD5 f1637065c9d0912766198ed9c214a107
- SHA1 5c51a4e039c2136eab54ac73b39a478d5ab22a05
- SHA512 053c329fb6dae71c7bfb74b6015b1d7fc6a732f4838ba247cf1c6f9d94dc8a5f1d91f3ecde6fc0a5b00ccb57f21457229b7619bd4c6f3add3acabd0bbb4a13aa
- TLSH T11051EDBE2F49A27D1571DE94CB0AB653CEB002A78A1D78B0718D21C9CF3568413BDA60
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/My Project/Settings.settings
- SHA256 aee1c3cda12a474a7a8ead292418eb734cde3c4a74a4977e0bb0ed160613a1eb
- MD5 4a12ce12282d0ee237b12e7513037c50
- SHA1 9a820bef12266f5e641770f44af881f9517f5222
- SHA512 c8229ffec5e3a2df33855a22f53fade99c88e7c92404c35529d2168ef21597de0477164fb888da7192fb3745d47980fa4e8a6259485dfe5a34b481ddd780a432
- TLSH T189D0A789A4C88C0A93317AB0F4ACE33C95146767856E9974B2743C4F19071D61AD75EB
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/My Project/app.manifest
- SHA256 91925eebcf4a3c4a68af342a04d28299ad136bd817d47dff9b51ec01609162ec
- MD5 e15369a48e1d1add232719d457290927
- SHA1 d24669ab6706d3cb3b55467198badc598ec5a493
- SHA512 2022d60d39edb9a11677416214f919dba032b3ad55652b3ae53804427e52ae36eff3afa7c378b237c4111236a06a18d0aad38e3535578724b5e429871caee21f
- TLSH T109516382C0A0427153B240CB3E399B27EF36527F198D0AF8F44C595EAFB624AC3531D9
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/NJRAT 2.vshost.exe.config
- SHA256 c45c9d1d30f940289498be2af978d74178a5c24ceb7755c2648f6c7a89353813
- MD5 da15a1d8d770b57356ddd384342b3034
- SHA1 b03d6cb907c139492c7b914147a498b31ef839fd
- SHA512 3cf7dd0d14244c543e3442873ce7e495ade87ad906a42d53f3b38180ffc453bd74ae022b91306445d359475dbee4caa1514c4e913e823d174b8470b45fed7cfc
- TLSH T1FE21CE45A5D08CB5466396636A544EC0FF364B9F724C154CF8DEBA9B8F3342C4707192
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/NJRAT.exe.config
- SHA256 c45c9d1d30f940289498be2af978d74178a5c24ceb7755c2648f6c7a89353813
- MD5 da15a1d8d770b57356ddd384342b3034
- SHA1 b03d6cb907c139492c7b914147a498b31ef839fd
- SHA512 3cf7dd0d14244c543e3442873ce7e495ade87ad906a42d53f3b38180ffc453bd74ae022b91306445d359475dbee4caa1514c4e913e823d174b8470b45fed7cfc
- TLSH T1FE21CE45A5D08CB5466396636A544EC0FF364B9F724C154CF8DEBA9B8F3342C4707192
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/NJRAT.pdb
- SHA256 031aa0330d8a8433723322bf9ee2b59d5ea166bf441e4cba7efd7f826c6c0973
- MD5 4de7bfaf02e1da8a2210621d581ae618
- SHA1 7b668796bb5d2633317d5fae5a1f8a77209eaf16
- SHA512 9699a7131af1748071f205af0ab5e371ecf266a96d2e45fc9f45c103c37816fb501270d5ed6cc36b77eb592892dac984afecb9bb4d3b73d19088f6e419bc6c94
- SSDEEP 6144:cfjoyE0OEHrXe8WO+J9JsrnwSHlxFowWajXwO0mq:6geRHLwOj
- TLSH T176944E03B786C532C0229B38476B8F3D9778E5822BAB8F5F4794A86D7D963127F16314
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/NJRAT.v11.suo
- SHA256 24f8567c214ee8b5c6a54006e4a46fbca3ec2182acad8f2975d544e95fb5fd65
- MD5 4e2d29d6e0194b2d51fb03010495b213
- SHA1 d7bb3167f3faac7b2eac98d08a597b407bd45d23
- SHA512 347aed343f6752fb36404a0a12d19841043beeb4cb082d79434e836cbdf639e001b9ad41eff261d943faf86136713979c2bc64a8584a92e7370fdb3c3767ba6a
- SSDEEP 768:xaEaC3yWfE7bVZsGeF75SbVz8jyiSd10ohQnwsqWY8Efpmg9Q+KF4Kp4Y3OAWEHF:xaEaC3yWfQpOGeFBQGeFg
- TLSH T1DD13441023F98288F3B69F355EF2D6999076FC61AD21CA1F2255774E0870981CAB1F77
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/NjRat.sln
- SHA256 0badb56ac1f22549f4205a03bb587a921a0e77696be984e597fa00c9c5ff72e9
- MD5 8450e1b4fcee3fdb049fd222aaf35029
- SHA1 1dded9797ed380de3241f0e65141953c306e9a12
- SHA512 e2aa8015e36bbb975733cc148a7c54123853401f8cee9ca1281ffd491c92726a417c3bbacbaba016d0dcb1782fd5a86056e4130deac8115296873ed4ce415371
- TLSH T1FC110499500D9DE9B98613AF81E66CC37E734290C6CE083E02496058272F9926167C8F
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/NjRat.vbproj
- SHA256 4d684aafa6c6b5e2dcad488f6d73d01762defb9c19e9f8bf330d6127c3ba953b
- MD5 b606fe9e189419a2a6a0816e03b738e3
- SHA1 d172899c4a6354f151fbcff3392eeb776c43dcba
- SHA512 7cdc46fc5d726cb70a1b5fc59e00e1ca7d55ea413f28e88d1683120d23df963d88e9266dc3102314b9a8705bcb0e9cc49d567be30ae2c9e9f0967f7b476f1fc1
- SSDEEP 96:DWnpu5lWtOGlo7R55B0/UiGlHzziMEOdsHSL7+NA1dGTuJoli+e3M1m80ckufuZS:tstOGa7RnEBNAcuZgzCQLdN80UprJrU
- TLSH T118623C78E2DE7D98037660F6A746AC01EF58B2E384650026FA8DA6475FF159C201FA2D
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Referencias/WinMM.Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
- MD5 d4b80052c7b4093e10ce1f40ce74f707
- SHA1 2494a38f1c0d3a0aa9b31cf0650337cacc655697
- SHA512 3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450
- SSDEEP 768:LyasDzF2TDSemqD9tGI+ffwj2Au0LVpqmf7KxcOOrYCPTxqPb85:LyaXKemqD9tGI+ffwj2Au0LVpq4KWrlv
- TLSH T1EB13B60479A85CB9CB2F013D6CD61211FAB18D647227B62B1CBE70F318977DE9A41AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SRC - NjRAT 0.7D/NjRAT/Resources/JPEG.png
- SHA256 ebb76b612f172fbc81c3d6177b2a3ac16d50eab624acd810aab234fdad4e2318
- MD5 9669078a841e9b2f5a9ac4b61b5cc28c
- SHA1 8341399d47c3448243dc91d93370ab2758af0f3e
- SHA512 715c78c7220fc43645df0b11bc72f9a71c7a9e4b6f72e15251e636ea6cd8708f73b0512be2bda2e749da9c4d43512cd07804d6e705d6053dc9d94bae172df4c4
- SSDEEP 3:u/7lJl4ltNWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWS:u2v
- TLSH T1D30204C373401404D0445371400DF535373C4C031451111414C17C033441044301514C
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Resources/Res.exe
- SHA256 52cad2ada36a7a4b8d5e653cfe1854d32210ef198561e4cf53ea1c4e5ebbb84f
- MD5 2f92eed4e2061af0961f379e9ded70d6
- SHA1 8b58dcd428759d3633a14bcfc62a8cb6deb66de5
- SHA512 909561ad25f5a4af7360004a6b259bdb70dfad4ced7fe0f39a72ed61f421bc943dce9c7215634ed12284811f36d9a5bae8d1f439412a94bbbd4c24cb4f4962ac
- SSDEEP 24576:XS9wlTzi2gQO1PMV2DCHAJ2glv9fJVOYfJSzaSArbz2jQ:C9ijgQO1PMDozYAPz2U
- TLSH T16F258D23F291443BD6732B369C6792F4592ABE103E2C994A37E83E0C5F763817963197
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
757932
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
736KB
Virtual Size
736KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
9KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
201KB
Virtual Size
201KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
SRC - NjRAT 0.7D/NjRAT/Resources/bullet_arrow_down.png
- SHA256 c69d8e84ef80efb899be8b46c0d15b2354521d9ddaa016fa434335ace3b904cc
- MD5 62fed7301461155cc1dfb2e8793f6d72
- SHA1 a5db6c2a747e694f48a69ffcb7e165b51dd9f60b
- SHA512 eb212a859a81a6557a86270b55e8da27fa5cedb03ea4b03badcdcb1b967aca5938560fece86503312ffbb066fa6426cbb167d2a68494dd819d56a09fc74b7ab2
- TLSH T11C118076334CCB6EE00555F3C6451DF815457C40D52D4133D5077D58343254F13A4D71
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Resources/bullet_arrow_up.png
- SHA256 c984cea0950d67a9a3055bec9fd7a0b0489f024e507dcfaa9a428f315fb37dd6
- MD5 d6d487985b6e458d91288b11137399d6
- SHA1 c4d33a9136fbd4e8cc8c4a30b5edbaf4500420ca
- SHA512 cba2b24effd5dd2fb9f77d21a5b28256c1496e131f921f52fb89dcbfb801ff3da7b283243dac84ff1106c5afc5930fd0d58be98b3d601939670e9016261e1781
- TLSH T1921112327144C61AF44912F7C44D4AFC960DDE14D0AF227385123D183974A0B15285E4
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Resources/control_pause_blue.bmp
- SHA256 e127d8e30cbb5ca260ff5edac3b3a5be5239a7f88ff2e3928a9578dcebce5c04
- MD5 0789be6909d67184d79fd3ca0e5a27d8
- SHA1 1bc1a5e44b077be0b609d2969edb2f4efc85dc16
- SHA512 c5f1427ff7755128685e5ad97f9c72d4f8f89cfaa304cbdfb24cce0d3e4b3181cfde4b24bc51ec9edb55348aed59fd4fd4bff7a144311fd607326d108f870123
- TLSH T15201B5F2258CAF7ECA80820F7127B300B16409C70192514F3751E36CB72DA865B31F47
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Resources/control_play_blue.bmp
- SHA256 d2b7beffbc9fd4d119267fe6cd547c495044d453dd1650e65a7a0dc186e820f3
- MD5 c583da4c591d9d32632be644c4b4e7fe
- SHA1 bdb19d10f1f721353fcd8a3430d70741760533c7
- SHA512 0f535f2e8bb33609795e4989ee2c65d8db8095341dd53b2cc42bfe3a660b2d58130dff033c20107cfcc55a4c3cb919045ce0199b009243ece5c905f71ae63c9a
- TLSH T19701B587350A1A7CA905037B0864D02C3C1BD6BB2E480849E6FBA038855A9C8D0A29F6
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Resources/dotNET_Reactor.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 79f190a51af8a463f13ddd5a76947cf7ba2adfb8e231b37c5e0968602217a62b
- MD5 a7d69d6ddbe2586d698ebdf7f49c1afa
- SHA1 7b87de25c982d0cc42a1dde89790cd34acbcfd2e
- SHA512 2d4fb34f83d9794c38ec39f12f78b8d7c5af331aea475eaecf589f95c9e1849196a8d5252a7f9beaa596bb34ddc0c94b76a6c9092dc0fb93ec6b0af9fb66226e
- SSDEEP 49152:VXl2PFBegFNFLua2gBxnnim//7rF31inFhyNkLObEECwc0mjZ5tzCo3Eh5pfO+pD:VW5nnim//7uvwCt5tuo32v
- TLSH T1C6567B2076A8C911E0AE9774C3F281FF0BF0FD0BD226971B69857F6639B17425C06A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6205246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5.9MB
Virtual Size
5.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SRC - NjRAT 0.7D/NjRAT/Resources/icon.Ico
- SHA256 b33ba45617295b330a2b7f403dbb37f9358086e7440c3fd73eab813465259e44
- MD5 cf62478a40fe8cc6c88afc0816c28357
- SHA1 f179616d9dfd10c9269ec465c9170dce0de67d0e
- SHA512 4df3f29b5d482ddbaeb241a378c17dea2e3464675b140f1742b7c1560be9419ba72e516f05ebef31cf2b7748c5eee9e9a0e73545258af08cb2a106b5f8713feb
- SSDEEP 96:ZoBCudu7sZ5c8zaTTfTM1EkohA4JtKApouLJGeist:rq308ubsNohA6nouL9iw
- TLSH T18AE20B6139459D4AF0B672FBC8158CA02B912F381E56894E75B7BB4EE8F7D13EC2180D
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/Resources/mpress.exe
- IMPHASH 51e7ef6b1d43d0d05d7109dee9789560
- SHA256 2852680c94a9d68cdab285012d9328a1ceca290db60c9e35155c2bb3e46a41b4
- MD5 8b632bfc3fe653a510cba277c2d699d1
- SHA1 d6a57aa17e5eb51297def9bac04e574c1e36d9c7
- SHA512 b9ea70ed984d3b4a42eceb9f34f222b722c4c1985b79b368d769fe0fd1f19f037ffebe2cf938aa98ed450337836a7469d911848448d99223995f7fb3a9304587
- SSDEEP 3072:S0+mlNniJkkKcfqBOb65VgB183gUGQ340HpL:SvmlNn4kkeOAVA1rUGh0Hp
- TLSH T125A3F1A1B140A61DF98F4E39CCC7B38994D2EC21953352466573FA8F84B27E43F12B49
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
225455
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
GetModuleHandleA
GetProcAddress
imagehlp
CheckSumMappedFile
Name
.MPRESS1
Size
88KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.MPRESS2
Size
1024B
Virtual Size
862B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
SRC - NjRAT 0.7D/NjRAT/Resources/mynoip_logo.png
- SHA256 da4cb761515d260e9d17a3cfb20104a9fb77438963b6c6b2c8282e86cd13ae44
- MD5 8543176a283ac66ac7d1510cc81679c5
- SHA1 70e03c02ed73c26a3e7b77eb8e68dd7e432fd66a
- SHA512 984c48239b4958f4c3fa9a9f2fde1f9adc2428cf34e82c7f01128fa67601f57e19816c6170b1fdd2024047b43f53d7d351bb36b6e92dcbe9ec3844b19545fef6
- TLSH T128D023C33C103F49C003183E11330400FA7D6CF625BCAD59CC2B40140D313108BC1043
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/Resources/noip_logo.png
- SHA256 415a55fd9a79290be38469910f7e0ef82ff9cd25e54cc2d88482a32a57190d51
- MD5 6a8a80831fea6121c9c836dc46fb244e
- SHA1 513f16b69a4c2d0ddfb4c78233579fe8682a65f1
- SHA512 24f2108c815c743536be9bf6c63c8b8fa47cce243501d933cbef85a36e9b0d6a19bcd21fc7ee2acfe8f0440c34925819cc1f4cfae975cc153755e500a0949662
- SSDEEP 384:9KNnXVYxmsMjQIfdSWb0ONxNpUl4jOW9aGAJkp:oN6msMjQIfMW9NLpUla1aGAJ8
- TLSH T1A242B0C9D87165C24A5AF60DBCE2315FC6731CC581C268661CD20CB15A7A9BFCD189F3
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/app.config
- SHA256 c45c9d1d30f940289498be2af978d74178a5c24ceb7755c2648f6c7a89353813
- MD5 da15a1d8d770b57356ddd384342b3034
- SHA1 b03d6cb907c139492c7b914147a498b31ef839fd
- SHA512 3cf7dd0d14244c543e3442873ce7e495ade87ad906a42d53f3b38180ffc453bd74ae022b91306445d359475dbee4caa1514c4e913e823d174b8470b45fed7cfc
- TLSH T1FE21CE45A5D08CB5466396636A544EC0FF364B9F724C154CF8DEBA9B8F3342C4707192
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/icon.Ico
- SHA256 b33ba45617295b330a2b7f403dbb37f9358086e7440c3fd73eab813465259e44
- MD5 cf62478a40fe8cc6c88afc0816c28357
- SHA1 f179616d9dfd10c9269ec465c9170dce0de67d0e
- SHA512 4df3f29b5d482ddbaeb241a378c17dea2e3464675b140f1742b7c1560be9419ba72e516f05ebef31cf2b7748c5eee9e9a0e73545258af08cb2a106b5f8713feb
- SSDEEP 96:ZoBCudu7sZ5c8zaTTfTM1EkohA4JtKApouLJGeist:rq308ubsNohA6nouL9iw
- TLSH T18AE20B6139459D4AF0B672FBC8158CA02B912F381E56894E75B7BB4EE8F7D13EC2180D
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/xbin/GeoIP.dat
- SHA256 b4bfd1ebc50f0eaab3d3f4c2152feae7aa8efad380b85064153a6bfd006c6210
- MD5 a0a228c187329ad148f33c81ddb430bb
- SHA1 d70ec83d1b15b3156df73802dd1bec024b1b9346
- SHA512 0fe0a62c07f7ade0e6bfac8843c13c055369177935d801488a993bc4bcdb9da220ba1b37df2027dab8af7c15e5cf00b3e8f223b12165d8a1b0b9c30dc9939332
- SSDEEP 24576:WUH7rp/TXKHJBjsN0wjAu6e3akVX7k+k7bKnz+AHxOxaz+hnV647KyMLh:WUH3p/TKpBjs0b+akV4+C0axaz+ZVL7o
- TLSH T129358C22FF0696DBA9413D9EBD189EDC18148DB9FD071339625E379C60B8374CCC26A6
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/cam.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 881d5afb9aa4799c73e75dcd28587dba85dd844e4137287ea48c6b66525e2638
- MD5 8ce3060686462fc72ece2701caa13e3b
- SHA1 19fc9892200de4db332ddd0c14b4b6fd9a35ccd4
- SHA512 ef38e00b054240a0d4747bfd79db860015ed027735c360de58af6889a69482109ccf74770608a2750542457ac38aa79367431ff6ca77fae44d7e3a7023f33a17
- SSDEEP 3072:31IL2SeOPGmBUMqtZabredepzZxgUPWeJP3:w2Sm/MqueepzZxgQW
- TLSH T12EA3091A77479B17C54C5A78C0EB2B0403F0978A6373E7CA3F6C15ACDE633425E5A68A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
107070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/ch.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3c088df7119c494e3df95af42456225f4dab1c3abe003869f8c79afb0993b027
- MD5 2fe4b9dbd31f83faa7aa1c692ba4d3a2
- SHA1 1b3c03e29302a0f07acb4af306a7ad42ea4827dd
- SHA512 cd169dc1d2d5cf0f538334b8ac31817ea1a4e2c8c0faca6a715c63eb4aa464e8aaa4f6b10fe030f46a37ab18a1cd6fe099c662c727e107cb87ada1a8218bc5fb
- SSDEEP 768:FjTkCC7kDA87eqVlviNDkpI/pDwxRcNDRQt40BthZWMaGOQKgB22T:dkCC7kDA87eqVlviNo2hkxmRRQthBt3O
- TLSH T1E7238315B2874313CA2C65B540DF352413F3978A5B33DA9A7D8C02FD5ED23929F86B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/mic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 27528a77e27d02aadecabfdf658b2da638bb0ca2f2c60bdd9d0fd5338c1fc346
- MD5 9b376f0d44995ca15d43f7943a602fb2
- SHA1 18a2bb7d13836256bd5f39089203f18d740669d5
- SHA512 4dfb0c49816e0d0c2f7d0d76081725bd48d3713506ec51ac6c06ae7092908d14e3683d707d6f332505163fb0ade0ee6b50a355cd69c25725e829ebb23a3e93b2
- SSDEEP 1536:ZAwSxproATOoeQHshYNR1zTTxqPbKhOCjXKem:TSxpr/KoemAYxTTxqj
- TLSH T17873F814378B1E76C42A09BA58C73100B3B25F997337E61A2CAD11EF5D433DB9B44AE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
84142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/plg.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 13043521ed6876edf2736fc46a7c49e6b639cfa7a866ca11de26f119796cd521
- MD5 c179e212316f26ce9325a8d80d936666
- SHA1 14d08b3cda60341d1e9187fc14bd64ebefe4a5b6
- SHA512 1b5eb687a9932c82ab2e655dbc5df8ba667a023e7568dbbd13c503a54661763193bde11937f87e2e09b88d770c8357eda07589d526e6103db058038e3ce3b750
- SSDEEP 768:rVRKgRFKn3N5U2jNGUyXWI9Yi1s0sbtAEsz8CjBMiPs2T:pR3R895Npyhn1sBbtPsz8C9P
- TLSH T10853D80A77878625C55D177054EF512007F787872B33EA5F2CCA0B8D4E923DA4FA9B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
71726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/pw.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca6367d1ab873a55ced13d7024c530bbe4a6a703813225233e59041c7ce14eaa
- MD5 ac43720c43dcf90b2d57d746464ad574
- SHA1 eae39df1c717ca74f6f04d5ca8478ea55145535a
- SHA512 9082b3cd8b36031256923c8f2bed628e9331129bbf09d111d9d02268a49e493248e5638ddee5b02da66e9159a608f8f26499ca0f736d6a369a30f71950c60d40
- SSDEEP 6144:QxY714e31bXJVFJmShoCKFdZ3aDGjXsCUjguhyUOMO:7ZxJ/JmSG9T8CEgdM
- TLSH T19454D007728BAE61D47C467123FB72D183B5AF461633D51E2EC822499B3B2D3BA41BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
284686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
270KB
Virtual Size
270KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SRC - NjRAT 0.7D/NjRAT/xbin/Plugin/sc2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 010b1ec566be774a2d12146f9826aa31fd7eb6ffe7b45ce5e572b2d8c7f815c3
- MD5 2d65bc3bff4a5d31b59f5bdf6e6311d7
- SHA1 43962fbeb93fc267fb1c7036a12b8c5d6f40c28a
- SHA512 b210d447cc9b4b89402a2a1d3d5e9cfe13ae897c47094be4110ed3aac109152c8a45ec138f73b703e7d3799934234cba4ca3f2439b3dd193a4cec671b9edaa6a
- SSDEEP 768:mtAX1G0UYRxIDbYDGN5/eoK79QlRfe2AfgFTMBku2T:mtAFZUYA/uW2x9CJe2BFQB
- TLSH T14423C602738B5B12C86C097240EB252413F19BCF1733EA4E7E8D669D5E933939F68B49
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SRC - NjRAT 0.7D/NjRAT/xbin/Stub/Stub.il
- SHA256 8c57706fdafbf6981da459d8ef85654b1a8830381652b44cd486f6747245a2fd
- MD5 77e35880da8fa98f1ad8dc3ab322af22
- SHA1 9e69dcb4b4f1f2b3c38d3b945135536a2d011e35
- SHA512 1e2ea9ecdbd529ad55930ef58d3fac9640e041d2d5fc07a2f2c4738f749d6cf7eff47a6397ffe6be7bd7c73e3c08e733f00d57e5917a0b20bcbfd43058506651
- SSDEEP 6144:XY54wj3kCi/A9rOQCMUJIghk/UgfnktBSMsC9VFs:XY54wj3kCi/A9rOQCMUJIghk/UgfktBO
- TLSH T15474CC288228959AD5B2A51DBE71CB46F77F12270F31AC967DEFC254BF31284817063B
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/NjRAT/xbin/Stub/Stub.manifest
- SHA256 835a00d6e7c43db49ae7b3fa12559f23c2920b7530f4d3f960fd285b42b1efb5
- MD5 4d18ac38a92d15a64e2b80447b025b7e
- SHA1 5c34374c2dd5afa92e0489f1d6f86dde616aca6c
- SHA512 72be79acd72366b495e0f625a50c9bdf01047bcf5f9ee1e3bdba10dab7bd721b0126f429a91d8c80c2434e8bc751defdf4c05bdc09d26a871df1bb2e22e923bf
- TLSH T16EF0DCC1D188CA6AD73042A13A66E410A2AD435B19DD49EC74DC2ABB6F0BAC680C30F1
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/NjRAT/xbin/WinMM.Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
- MD5 d4b80052c7b4093e10ce1f40ce74f707
- SHA1 2494a38f1c0d3a0aa9b31cf0650337cacc655697
- SHA512 3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450
- SSDEEP 768:LyasDzF2TDSemqD9tGI+ffwj2Au0LVpqmf7KxcOOrYCPTxqPb85:LyaXKemqD9tGI+ffwj2Au0LVpq4KWrlv
- TLSH T1EB13B60479A85CB9CB2F013D6CD61211FAB18D647227B62B1CBE70F318977DE9A41AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SRC - NjRAT 0.7D/STUB/j.sln
- SHA256 0fbb40ecfac6e468a1b4032e5cc5ce521c09be44e1d51f1d905592f50c0205f5
- MD5 4f6288037dbfcdc12b408978df9cf39e
- SHA1 102389a5690d42a3ed0f687ebf4669deed78a133
- SHA512 3a2e126f858f425664f3a377377fec4d5b55f0d81ac2e1cb68c1b3f7aac19e6f8534f71258fc3caf7461cb2041bad6001b86eb4401505f87c8732f460ac4b47d
- TLSH T12B010CBD712E74E56185112FD1B50C4F3F3AC28482E91EBC05475ACC6A2B989838F48F
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/STUB/j.suo
- SHA256 1118e6fc5be7fa915be86764eba595c02a8e2eff6d1a4a54bd81df067221b701
- MD5 4ad856fbb3b52b4dde0b875caa578dc0
- SHA1 069ffad40a6c3aea134a9ce4a63e49464fe773c1
- SHA512 e86d1fdf2d23cd03bb327a682876af553af902e9ac4b9743f1ceddbf33f88179da427ddccadaca80caebe0adb62eaea2429dcba8d4928ebded465417247ce2a7
- SSDEEP 192:c5/2yVE8vkGsQjvebaThZca38mxWmcHlzyzvzggArQ9U9:c92IEEsQjveGh3tcHlzyzvzggArQ9U9
- TLSH T16E52452033E48254F3B35E366EBAC6992536BC629D21D26F3094734F1D32E51C9B1B27
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/STUB/j.vbproj
- SHA256 becf6ed9c68fd055f74d16ee06da30f8b4938c7c7624b417a221e5ab3cae9e85
- MD5 02ed49bb01be61c9c9e6daa28d1a081b
- SHA1 a10415f35f86f50ec6918247995c11657f9fba8f
- SHA512 5a5d7d68100fb08963843fed3d8d85438a2479fb055c4963bf80d75c1a07bed181d9e6a30bd358199a5f757a8bef1826f4d45e938e47daa6f9f9a9af0fa200f2
- TLSH T17841C934E5CC3E9453701533D2A7990AEF2593D326A008B9F689D64B5FB36E82163733
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/STUB/j/A.vb
- SHA256 4c5df3f13a37d2d4675c2e7566d578a7e7babd33f87f082e2327a412cf6bc7ed
- MD5 e4ef7d5a5b27d79935bab3d8701a25a5
- SHA1 5b2f8589b80988f81197e878c48c294107c1384a
- SHA512 0b98e16d58c8630c10cead8b005d2551517a5a719a8d28e7c5a082a5880c1df4e95cbacd95e9019c51d2d3ad58fbb0545c382ffad42f0d332955ac488917c2fc
- TLSH T1DDD08C7325C7B0D908BBCE3D2944B0B7F613000BA2094880F8EC21AAAF320C0360666F
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/STUB/j/AntiProcess.vb
- SHA256 d4034274dee158059bfeea566e5b68d4d9dfc7eef5181b377133a9ea3161cf6b
- MD5 6ff151ab548c646da8a7845eacc6a64a
- SHA1 8c518980a1d91c583f5856e69bcd5f9c2db5989b
- SHA512 eda3a79ba7dcd409d9c881da839aa0a95555bf73052eacc4597f29fe987e45865d38045e3aaca32381ddb4878513a2729896b6e7ad9f781309662529874c3092
- TLSH T12181D19D4BAFA21863FA48487D414807EEFA190B1B7BAD34797CC262AF7605011D66CF
- MD5 SHA1 SHA512 TLSH
SRC - NjRAT 0.7D/STUB/j/OK.vb
- SHA256 a8dd6906fb1487922c3fb5ed49a78efc09ce47f8299db25227a64bea5d01a6a2
- MD5 b8286c1edcd89d833f04d34bcd8c3627
- SHA1 885c5e7a53a2474677143720a0f39a649d7d1de2
- SHA512 51ebfe1562888a905ce0368342e1139de4ef4910e684887959a0306c1ce3f8abcbb472efcc023d37d7c80b96d587cf4c03c7e069d43f36dac19890837fe1cab9
- SSDEEP 384:ijdMHz+WdmDdz86V2NO2UW+h/Avr1gLwmcRcXVKiINbwbbDZZZlyuETHKyNfKw0O:HgNi50ejGv8qeywd
- TLSH T16243422BAD12907795FB8808563AE844F9B32B5322748861F0ECE5519FF14ECE327797
- MD5 SHA1 SHA512 SSDEEP TLSH
SRC - NjRAT 0.7D/STUB/j/kl.vb
- SHA256 43f995dda64d33828f2be7ddcb8c0914258133e2380003d76f0403e2233801c5
- MD5 0e3d12c43dfad83447b875cdb60dbb60
- SHA1 a693589d8140a7c841b34cf8be26772968d4b37f
- SHA512 8e5b27b2c0d23c47c88ea18916d8bc7cb5e78c55315633e90f8e7349329cbad44ba07917d276883772e70e9c0a4f3fdc7a67aef3652fabe83510540e2ca7c286
- SSDEEP 96:KS1wN9F6sRWV6oNY/H0kWdvOfyAxeRJWt/WoWVaFPzvWnE7x:8BbANY/HW18/5CaVF
- TLSH T19BF141176D16943596FA9C284C26E41AF9DA610322781CB1F0BE86715FF04EDE23774A
- MD5 SHA1 SHA512 SSDEEP TLSH