Overview

overview

10

Static

static

10

38a868db74...fb.exe

windows7-x64

8

38a868db74...fb.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38a868db74f08e1fc888b6afb.exe

  • Size

    37KB

  • MD5

    38a868db74f08e1fc888b6afb631be59

  • SHA1

    b8007e5c2f2b1986949802b7f6cec7a9d94a63f9

  • SHA256

    47d7951e77aaff5f193efb39d5d9111cda39bbe07ea58595d4e33ce173e7df57

  • SHA512

    43d0ce6f87076fb038c2df401aea6391d751b6d76829fe6446633f755fe3233848e0405fc77de2d0b075d0fde0e86ed016116ba7af204b664171727793f326e7

  • SSDEEP

    384:BmqQilQhHeTnMGiyMTFU3nuj346arAF+rMRTyN/0L+EcoinblneHQM3epzXBBNrT:kLSMGxMTFUej4xrM+rMRa8Nutjt

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

185.32.6.121:2000

Mutex

f0eb963c51ca1622da324360cc5c4d82

Attributes
  • reg_key

    f0eb963c51ca1622da324360cc5c4d82

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38a868db74f08e1fc888b6afb.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections