Overview

overview

10

Static

static

10

1jsLRvCU.exe

windows7-x64

8

1jsLRvCU.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1jsLRvCU.exe

  • Size

    31KB

  • MD5

    7cfbaa946f35782c324951b60d53e608

  • SHA1

    f77442e9be5917d17be6d6ffbb4789e0394753d3

  • SHA256

    f7200c5fb4b76977b2d73ad68bc6eb4d1b2f61c88fc804fe028f9701361b4bf3

  • SHA512

    e891c479e2b12f2ee2c5e3df99bf73306229af522c9f3df696e745701bc369f0abdd19d1537b3d2398cbae0dbb27ee96fae0010f1874412efef7390f695223b2

  • SSDEEP

    768:/ZorDp8pdvXyzx9uFwna/5nW3TvanQmIDUu0tiEdj:uw68nQbkQVkVj

Score
10/10
mybotnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

msvenom.ddns.net:1177

Mutex

cb63b6802435c2c3e1bb7d92e92a88aa

Attributes
  • reg_key

    cb63b6802435c2c3e1bb7d92e92a88aa

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1jsLRvCU.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections