Overview

overview

10

Static

static

10

ac8a561906...39.exe

windows7-x64

10

ac8a561906...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac8a561906f5692779a581628fb137ca81d34262be7f43e4c74302b070ca9439

  • Size

    95KB

  • MD5

    72af8aae429d9156f85a14107fc4fdc1

  • SHA1

    746a62f8ac1419a783f245a70a58849c47ab15c2

  • SHA256

    ac8a561906f5692779a581628fb137ca81d34262be7f43e4c74302b070ca9439

  • SHA512

    8c5e6691de5621eb861caafcf6a2083ba59f4db1a9ef7becd896f7697f5a071efde4e4fdb8e0ff422689fed16a458ff1f506496d6fb19dd94776bd04dc6f265b

  • SSDEEP

    1536:l7/jbrkyKhG29j3i8K2pz5M4p6MQ2T6OddAs7gX06h:pPwdA29xXAs7gXJ

Score
10/10
xviursnjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Xviurs

C2

xviurs.no-ip.biz:1177

Mutex

12ce4e06a81e8d54fd01d9b762f1b1bb

Attributes
  • reg_key

    12ce4e06a81e8d54fd01d9b762f1b1bb

  • splitter

    |'|'|

Signatures

Files

  • ac8a561906f5692779a581628fb137ca81d34262be7f43e4c74302b070ca9439
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections