Overview

overview

10

Static

static

10

14AAE3A98F...75.exe

windows7-x64

10

14AAE3A98F...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14AAE3A98F654624043093B20DE1E93253B480C004E75.exe

  • Size

    37KB

  • MD5

    4c05aa148436b9fca9e90e2fc959dae0

  • SHA1

    2c139aeb49a6b10285944c400e15060ad6c4b35b

  • SHA256

    14aae3a98f654624043093b20de1e93253b480c004e759f25d7eefed326c2588

  • SHA512

    0641b3eb8d1f5a844264a4f54263b82ef59fdc5ecc2191ca3ee47588cbe7b05022e248f12ca6379beffd9b6ab755939465c8765448a3175c0cbf5fab77c0589e

  • SSDEEP

    384:Yh2KMizdNjnBhFbJ8ycPlXP/3w6ExirAF+rMRTyN/0L+EcoinblneHQM3epzXPN:W2gNlLJfcPlX31EYrM+rMRa8NuxGt

Score
10/10
pescaattnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

PescaATT

C2

crlslost.ddns.net:9500

Mutex

11d533935508126b31358f5920513314

Attributes
  • reg_key

    11d533935508126b31358f5920513314

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 14AAE3A98F654624043093B20DE1E93253B480C004E75.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections