Overview

overview

10

Static

static

10

bl.exe

windows7-x64

10

bl.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bl.exe

  • Size

    151KB

  • MD5

    b6e7f9b1dc0960a0181612aa111ba356

  • SHA1

    61d780ba255f3a8286915fce0fcc9fad1d32085b

  • SHA256

    08a66b92cf439396b2364d1fac4c069b28940c638d9111d39927ff7936ea01bd

  • SHA512

    708fe6d2568b8e0d35041296760d5441a8e980058533b488aeead8f9c2f8da317bd550539e40372f828afe8ef3178c311fc06fa8f34e85f7ac713db680c72a42

  • SSDEEP

    3072:O2XCPVe+yJSxAjVd1nut+uV2mTVDjFwkWl176jZ1hCagdgvPW:hXCZUVdRQ/vqkg1gEagdgH

Score
10/10
blue_linuxnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

blue_linux

C2

5.101.21.20:1556

Mutex

4940aa9c258e8b7bbda3428a2733adaa

Attributes
  • reg_key

    4940aa9c258e8b7bbda3428a2733adaa

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bl.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections