Overview

overview

10

Static

static

10

svchost.exe

windows7-x64

10

svchost.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    27KB

  • MD5

    8740108bd0ce9090a9b5e7760a0899b8

  • SHA1

    ba2051a69ca664164697d7263214e31ae04d0822

  • SHA256

    8e79230d27b1ebca8961567fd01786841599cd2b6b7512221c93871485386043

  • SHA512

    dbe47efd4372bf554ed29569b19e942cae8334e91ec253380e4fc879e33dc925b3585f14b18b57c259d6e2aa29a6709fdb7ecbc08cfcad9a433391e3b2a7f46c

  • SSDEEP

    384:bLBCnWzGgqhZArwvaGGuPh5BrM0AQk93vmhm7UMKmIEecKdbXTzm9bVhca86mr6s:PQvMAi0A/vMHTi9bD

Score
10/10
dllnjrat

Malware Config

Extracted

Family

njrat

Version

v4.0

Botnet

dll

C2

sosibibu228.hopto.org:1896

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

Files

  • svchost.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections