Overview

overview

10

Static

static

10

8539d8e44e...61.exe

windows7-x64

10

8539d8e44e...61.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5658dd93a8379d6c46126a380ceb8b50.bin

  • Size

    35KB

  • MD5

    ca0dc41e0b22edc05bb0aca5fd27a010

  • SHA1

    e5159efd2cecc1769a59401229e3a58467c8f782

  • SHA256

    99124bd66f959af418a01b449c46e579a8fccd244b70f1bba3ca4641ebedac0f

  • SHA512

    7cec1406a5156759d6746005b271fd274d7ab1d76cf3ab7ee587824320f089c78cd4548fe9b7b2735ec9823d1773e3ac45cf9d504d9ef6fc678668ca92648e08

  • SSDEEP

    768:eycqz88dJOJz0w5nZSDoeavP18we9uqpXajMIEWvnErTlVaDn8Tj3gM7:p3zxdJi95nZSDoeavNHVjBXGVa8Tj3R

Score
10/10
junio777njrat

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

JUNIO777

C2

verderesilencia.duckdns.org:2010

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    2023

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5658dd93a8379d6c46126a380ceb8b50.bin
    .zip

    Password: infected

  • 8539d8e44e928a23ef872c5a8ad4d4e632c9f489a013a5b29d36d15ac2767b61.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections