Overview

overview

10

Static

static

10

d68c663612...80.exe

windows7_x64

10

d68c663612...80.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d68c663612c92937bbb8e244ef625279f755c768ac4ac97e092f8fd5486c9580

  • Size

    60KB

  • MD5

    65660408a79c1ba98758a0980813933d

  • SHA1

    66fecb46e0ef3b187c159305c27ab2b25a523cf1

  • SHA256

    d68c663612c92937bbb8e244ef625279f755c768ac4ac97e092f8fd5486c9580

  • SHA512

    c31e348ada70abbc338f3e2351ea6058ddc964963d82cdbe4d086f30a7cebc77ad18b541ef82deb1847e239eef94762da791f25770a02c314d7310a3833ca35e

  • SSDEEP

    1536:Y8VkLWnLAvsB+ztBatmEQUr2f1KVS95l:Y8VkLWnLAvsE/G46S9r

Score
10/10
svchostnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

svchost

C2

127.0.0.1:1177

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |'|'|

Signatures

Files

  • d68c663612c92937bbb8e244ef625279f755c768ac4ac97e092f8fd5486c9580
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections