Overview

overview

10

Static

static

10

05567999.exe

windows7-x64

10

05567999.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    05567999.exe

  • Size

    23KB

  • MD5

    be37fd3c3e9097670ba843b6feb49237

  • SHA1

    59b16182a5ce7af8ef6bfb8ed3955ea1a8903bdc

  • SHA256

    aed8fc9ac23fc823fa310bda0a304954c0a26ce81e21a182147b70a1b7324581

  • SHA512

    bec5e453cbab7722092743554739c0d360078397a1822ea6279e2e019c7ff6343939b0749e9e086838319f0521c1897a67f4b821df7198324413f6633e35644c

  • SSDEEP

    384:ewz6+T4IjWZFNwXU0eiNUBdvt6lgT+lLOhXxQmRvR6JZlbw8hqIusZzZm0:9TbC81NgRpcnuk

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

192.168.1.88:8888

Mutex

0dc0a22fd4d3a7f8ad003e9c4e6c7b90

Attributes
  • reg_key

    0dc0a22fd4d3a7f8ad003e9c4e6c7b90

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05567999.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections