Overview

overview

10

Static

static

10

2212550x00...00.exe

windows7-x64

10

2212550x00...00.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2212550x00000000002F00000.dmp

  • Size

    48KB

  • MD5

    5ed3dcb8d4b38b429933a500c71b9a24

  • SHA1

    a7ea713d7e63b404adb38c41209d59fa1950b3e2

  • SHA256

    92bb61ed65655ef396a9a645077a9168d18dade214938f90f583bc73eed2a810

  • SHA512

    e6abdb500793041fbdc007ddf7cd4660437016171e631a35c2b8454f3a89ae3a82ec1eb67f010e7220bf1f0ecd31e83386f0567acc9cfd1b9f94575e6cf3add6

  • SSDEEP

    384:JoWSkWHa55BgDVRGipkItzY6vZg36Eh7FpmRvR6JZlbw8hqIusZzZMw:eJuk9pHRpcnuC

Score
10/10
flower homenjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

FLOWER HOME

C2

seznam.zapto.org:1177

Mutex

e970310f7dd73fa5de6ecd112e85ce64

Attributes
  • reg_key

    e970310f7dd73fa5de6ecd112e85ce64

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2212550x00000000002F00000.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections