Malicious
ZIP Archive
MD5:
Size: 0 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
2 malicious · 7 files
ZIPa796d7e512558cf1de868e996dd8ef7651956fe71e8c84063986d801098120d6.zipnjRat
EXEa796d7e512558cf1de868e996dd8ef7651956fe71e8c84063986d801098120d6.exenjRat
Structure
BINResources
| Config. Field | Value |
|---|---|
| packet_size [b] | 5huhuhuhu |
| BD [BD] | Thuhuhuhu |
| directory [DR] | Thuhuhuhu |
| executable_name [EXE] | NHZxRhuhuhuhuhuhuhu |
| cnc_host [HH] | 147.huhuhuhu |
| is_dir_defined [Idr] | Thuhuhuhu |
| is_startup_folder [IsF] | Thuhuhuhu |
| is_user_reg [Isu] | Thuhuhuhu |
| NH [NH] | 0huhuhuhu |
| cnc_port [P] | 9huhuhuhu |
| reg_key [RG] | 995806huhuhuhuhuhuhuhuhuhuhu |
| reg_path [sf] | Softwahuhuhuhuhuhuhuhuhuhuhu |
| sizk | 2huhuhuhu |
| victim_name [VN] | NHZhuhuhuhu |
| version [VR] | ihuhuhuhu |
| splitter [Y] | |huhuhuhu |
| HD | Thuhuhuhu |
| anti [anti] | Exsahuhuhuhu |
| anti2 [anti2] | Fhuhuhuhu |
| usb [usb] | Thuhuhuhu |
| usbx [usbx] | NHZxRhuhuhuhuhuhuhu |
| task [task] | Thuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialPort
PORTmalicious
9huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential