Overview

overview

10

Static

static

10

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    31KB

  • MD5

    1b9adef8eb82cb1a0d1f84fec2679f7a

  • SHA1

    6365fcf5a9f0b5cecbb9c762fdf8d93b589e915a

  • SHA256

    247bb8e86d0899f1c9e0f1aa7daa3d3a840457490bae16a21a4bf7ab24bade6d

  • SHA512

    33d90b45adf63dd9bae8833cdd2ca217627b3598768e1b5bf71f2887f35cba57547b95a617b7e228f9a39ac5fb1d6fee95d53f5f6c0cec759f4fdb39c81f2df7

  • SSDEEP

    768:L8u2fOVvZVYzxDCPGe9+vCiEpvgmHQmIDUu0tiALj:C+6ifi6/QVkbj

Score
10/10
trupashotnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

TrupAshot

C2

home47736.ddns.net:47736

Mutex

e86aacc59f5ce08853f1c69e5f9889ff

Attributes
  • reg_key

    e86aacc59f5ce08853f1c69e5f9889ff

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections