Overview

overview

10

Static

static

10

bff8055132...e5.exe

windows7-x64

6

bff8055132...e5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bff805513210c836103c8ba988a1aee5.exe

  • Size

    55KB

  • MD5

    bff805513210c836103c8ba988a1aee5

  • SHA1

    71a16020174e0b8430282f0d0b654d48df61e30a

  • SHA256

    fc029a13dfcfee8a324499a1be4407bef2e72a6e1bd6ded7f561b6be9a2bc131

  • SHA512

    ad664510cc02ed66e7bf9b2d86dc7be579eb216c29bad3c3c831ea1572c99013a86ff49a08d809dcb0973e3c4d657670d822dcdef1880e5a9728d1d04d090e7f

  • SSDEEP

    1536:swjs4DnAN7jytFADKwsNMDtXExI3pmwm:PI4DnA2PADKwsNMDtXExI3pm

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

0.tcp.eu.ngrok.io:11604

Mutex

24b61b01f0b852dde493a330e1313554

Attributes
  • reg_key

    24b61b01f0b852dde493a330e1313554

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bff805513210c836103c8ba988a1aee5.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections