Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    AppTask.exe

  • Size

    65KB

  • MD5

    a7ce2a99e6c42b01ea179476cfd70884

  • SHA1

    214160e351bb0d3e0b961b37eba698d29d109ff2

  • SHA256

    17a8d60ae25e00d5f31654aaece4e5da5c94954d5094e55f2a8b5ad7e5863281

  • SHA512

    f75df40d84224f7a145f82736599400a3de33ea897e0e5fa17b6fecea59194b9dc6a62846baf2248900f2d38fdb0482a8734dc409ad9f8aea1a04e3184557f5a

  • SSDEEP

    1536:o77IM0oN36tWQviFw1kJf5iBnvbcfLteF3nLrB9z3nLiaF9biS9vM:o/IM0oN36tWQviFCkdQBnwfWl9z2aF9W

Score
10/10
mamontnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

Mamont

C2

127.0.0.1:14881

Mutex

AppTask.exe

Attributes
  • reg_key

    AppTask.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AppTask.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections