Overview

overview

10

Static

static

10

05794199.exe

windows7-x64

10

05794199.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    05794199.exe

  • Size

    93KB

  • MD5

    c9d61d409042d7f0eaade82e1ffe00d3

  • SHA1

    489ba674b6177c5a2d792aa4104af018a2c3d2cf

  • SHA256

    8a29582eedc28a696f5c4635e3a64cf615842b2d0c4f68fa4afd6d7bb9b7633d

  • SHA512

    700ebca438c680715984036eea936ae33bd63eef3762c0351e794528d7d54b10a8fc9760728d0aeae620a61edcb68603f4f72ed52cfe3a6863341710909cec1d

  • SSDEEP

    768:rEY37GKSimnldjcRoMwrx7Y+DIkIITJbXXKBpOt8ux82WXxrjEtCdnl2pi1Rz4R:r3Gqmlbrq+1NTZWOojEwzGi1dD+D+gS

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

NC50Y3Aubmdyb2suaW8Strik:MTUyMjA=

Mutex

8b7c1abf2283c791c18c8ce6c7057a4e

Attributes
  • reg_key

    8b7c1abf2283c791c18c8ce6c7057a4e

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05794199.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections