Overview

overview

10

Static

static

10

08523899.exe

windows7-x64

10

08523899.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    08523899.exe

  • Size

    37KB

  • MD5

    b17414d6949c2e013de14fdc268cfc89

  • SHA1

    21f52aadfe9691ed8d28415ec0f31c8507cc6e32

  • SHA256

    99219aa34910a8c28a6bfc96a6a58247fb1aa6c0cd0abd4af5445aa0ba359525

  • SHA512

    812806987016518ae7270e5ef2ca9e580684943a9fde797756f4c7c7221144fb8bb2aab8e1eed8c879d2fa9b2da5c95382d96a65e395b9527bbf3e2fdd8f0e59

  • SSDEEP

    768:5YdqHpR9EfZnuCCFMXsrM+rMRa8NugUOt:isHpRyBnA6X/+gRJNHU

Score
10/10
discordnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Discord

C2

176.37.53.55:7777

Mutex

4e9eb192f2892f9e22c0f13eb935b2a7

Attributes
  • reg_key

    4e9eb192f2892f9e22c0f13eb935b2a7

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08523899.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections