Overview

overview

10

Static

static

10

xokHa2RRhV1q.exe

windows7-x64

10

xokHa2RRhV1q.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    xokHa2RRhV1q.exe

  • Size

    23KB

  • MD5

    92dae51f5bcb9e6251e72f4ab8921ffc

  • SHA1

    1342b15d4f07b508078208abbe7271758385771d

  • SHA256

    5a6f71fa0c01662f25e3a3de987861a3197a98437230d806354fa996de853020

  • SHA512

    edb5347e351223771f4bb36d36f512263ef22fd3a0355a6797c6374826056a4a85ef0faa0d797014106d9a5bf19109e2f8543c54370758660c7e09a209de3872

  • SSDEEP

    384:Ac6CqbFYh3odrVCGiHssDB4b6i6fgpEupNXRmRvR6JZlbw8hqIusZzZwI:/IU0tw3Rpcnu+

Score
10/10
hacked msy47njrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed Msy47

C2

markphoto.casacam.net:9990

Mutex

6a8f48f43dadfbfd9d24b0d7c3421c3f

Attributes
  • reg_key

    6a8f48f43dadfbfd9d24b0d7c3421c3f

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xokHa2RRhV1q.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections