njrat | a4f62c45af96eb8cd4ef13910fecc554[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
a4f62c45af96eb8cd4ef13910fecc554.exe
Size 36KB
Sample211224-a2c59acgcl
SHA256 1f7971e9d98d51e7a89cb3cc698ef9f4e0be8a31790c509f75993c1e61c159d9
MD5 a4f62c45af96eb8cd4ef13910fecc554
SHA1 5a716099195dd8f9d8a87f343be936c6d684b492
SHA512 dfd8404697c018cb95ab16776e02738445178568fed682a54e17cecd99d6f3865dc91b5747f3bdec0e15daf85aa73fbc38b7c50e41423f76721851e59a122bf9
MD5 SHA1 SHA512

Score

10^/10

hacked njrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

bisbotbako.ddns.net:5553

Mutex

96a463b52a9ece171dc1adc4c650aa32

Attributes

reg_key
96a463b52a9ece171dc1adc4c650aa32
splitter
|'|'|

Signatures

Njrat family
njrat

File Explorer

a4f62c45af96eb8cd4ef13910fecc554.exe

.exe 36KB

a4f62c45af96eb8cd4ef13910fecc554.exe

SHA256 1f7971e9d98d51e7a89cb3cc698ef9f4e0be8a31790c509f75993c1e61c159d9
MD5 a4f62c45af96eb8cd4ef13910fecc554
SHA1 5a716099195dd8f9d8a87f343be936c6d684b492
SHA512 dfd8404697c018cb95ab16776e02738445178568fed682a54e17cecd99d6f3865dc91b5747f3bdec0e15daf85aa73fbc38b7c50e41423f76721851e59a122bf9
MD5 SHA1 SHA512

windows x86