Overview

overview

10

Static

static

10

9d1e50cbef...91.exe

windows7-x64

10

9d1e50cbef...91.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bb1b632efc7b3553ce5c015a4d80b784aed468bd63dcf127c051d07df2213f80

  • Size

    15KB

  • MD5

    1391c7a0cf5df6651b6fc8676f21cbee

  • SHA1

    b708181b7b488f07faff9428faece11aa81f7906

  • SHA256

    bb1b632efc7b3553ce5c015a4d80b784aed468bd63dcf127c051d07df2213f80

  • SHA512

    673817527f98d94f78c02d6e6f28f9cc405b361a6925737eea755b4d84c8334a58bfe6b8e38e8161e129db3495833961e43c3c3c0c43177d5ad295580c14d62d

  • SSDEEP

    384:hjjFFAMFGEOSbV+HisfGqUrFd4485JuhdXc4LD:hjjQMFKQ+NUrQsH7LD

Score
10/10
kontolnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Kontol

C2

45.32.108.159:5552

Mutex

1da3b8905e6c54c724d1c70a5cf05f16

Attributes
  • reg_key

    1da3b8905e6c54c724d1c70a5cf05f16

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb1b632efc7b3553ce5c015a4d80b784aed468bd63dcf127c051d07df2213f80
    .7z

    Password: infected

  • 9d1e50cbef2a51e3ca0aa6504d7b8739bb431b1e7c1dce0db2f58ae9b277d591
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections