popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

tingo7.rar

backdoor njRAT PE32 PE File .NET EXE
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 May 17, 2021, 9:17 a.m. May 17, 2021, 9:19 a.m.
Size 22.5KB
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 3b0c19dc192dec271f3d14cf7bd51863
SHA256 a8768e632a5c8fbb7c7b201f1e6df6362ed48d77efa74c62eaa900e0e73eebee
CRC32 E5A99BE5
ssdeep 384:sIz4+r36P52FRVfgb1EQw6dc0/l34ZoZSTDs+:Zz4+r3u2+b1EQwSt0i+
PDB Path D:\RATS\njRAT-0.7d-Stub-CSharp-master\njRAT C# Stub\njRAT C# Stub-backup\obj\x86\Debug\wintask.pdb
Yara
  • Win_Backdoor_njRAT_Zero - Win Backdoor njRAT
  • Is_DotNET_EXE - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
149.248.52.61 Active Moloch
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path D:\RATS\njRAT-0.7d-Stub-CSharp-master\njRAT C# Stub\njRAT C# Stub-backup\obj\x86\Debug\wintask.pdb
host 149.248.52.61
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Bulz.193931
FireEye Generic.mg.3b0c19dc192dec27
CAT-QuickHeal Trojan.MsilFC.S17874654
ALYac Gen:Variant.Bulz.193931
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 700000121 )
K7GW Trojan ( 700000121 )
Cybereason malicious.c192de
Baidu MSIL.Backdoor.Bladabindi.a
Cyren W32/Bladabindi.DN.gen!Eldorado
Symantec Backdoor.Ratenjay!gen3
ESET-NOD32 a variant of MSIL/Bladabindi.AZ
APEX Malicious
Avast Win32:KeyloggerX-gen [Trj]
ClamAV Win.Packed.njRAT-7445143-0
Kaspersky HEUR:Trojan-Spy.MSIL.KeyLogger.gen
BitDefender Gen:Variant.Bulz.193931
Ad-Aware Gen:Variant.Bulz.193931
Emsisoft Gen:Variant.Bulz.193931 (B)
DrWeb BackDoor.BladabindiNET.10
McAfee-GW-Edition Trojan-FSHK!3B0C19DC192D
Sophos ML/PE-A
Ikarus Trojan.MSIL.Bladabindi
Avira TR/Spy.Gen8
MAX malware (ai score=83)
Microsoft Backdoor:MSIL/Bladabindi
ZoneAlarm HEUR:Trojan-Spy.MSIL.KeyLogger.gen
GData Gen:Variant.Bulz.193931
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win32.RL_Bladabindi.C4265196
McAfee Trojan-FSHK!3B0C19DC192D
VBA32 Trojan.MSIL.gen.c.1
Malwarebytes Backdoor.Bladabindi.Generic
Rising Backdoor.Njrat!1.9E49 (CLASSIC)
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_99%
Fortinet MSIL/Bladabindi.HT!tr
BitDefenderTheta Gen:NN.ZemsilF.34690.bm0@aO5CAWj
AVG Win32:KeyloggerX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (D)