Overview

overview

10

Static

static

10

Serverexe.exe

windows7-x64

8

Serverexe.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Serverexe.exe

  • Size

    151KB

  • MD5

    90d444c47ac6ce6658f4c2b503d0b859

  • SHA1

    5469ce598db79cbf4fff48f1669709d7bdbe521b

  • SHA256

    cbe3c371768fcfcddc01a3c3b06ab791458b935bf71e3995b4a7007168fe626a

  • SHA512

    9cb908e1e774c89ada275c952120cd90751b10187254a959efafa2ab7fbf55cabf1ab265337601f10985c3aedd52b88ececeaba1cc59e15c59c92ebc2cadce64

  • SSDEEP

    3072:bDnpg6Q+yJO6AjVd1nut+uV2mTVDjFwkWl176jZ1hCagdgvPW:fnpgqdVdRQ/vqkg1gEagdgH

Score
10/10
blue_linuxnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

blue_linux

C2

bluelinux.ddns.net:1556

Mutex

3793fa772f1045b1e7c5d7cd79bb658d

Attributes
  • reg_key

    3793fa772f1045b1e7c5d7cd79bb658d

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Serverexe.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections