Overview

overview

10

Static

static

10

rr.exe

windows7-x64

10

rr.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    rr.exe

  • Size

    37KB

  • MD5

    04aa98d887f08702ba5a635ef5c4f3b6

  • SHA1

    73eaa97fe49d0df44e49c5623b51367e799333ba

  • SHA256

    055004244ce4a5ea0c181ed879605f46698d76c6a0bafb3e916d7ac81a4c9d28

  • SHA512

    ba89d1b7d1aba85dced3a60fa32223e167a668a9d2c3b31bc657abbc087248a7878048538c4d2a1cc618d66fbee665f0535303f66fee085b4fb7777b4b3eab33

  • SSDEEP

    384:iYfsiDfT95hL5YyUvd3fPOM4CcpBlrAF+rMRTyN/0L+EcoinblneHQM3epzXbNr2:lzv5zUvd3z1crlrM+rMRa8NuNst

Score
10/10
ratednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Rated

C2

209.25.141.180:27891

Mutex

586bb3d5f3041a68d04b9b4991157cdf

Attributes
  • reg_key

    586bb3d5f3041a68d04b9b4991157cdf

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rr.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections