Overview

overview

10

Static

static

10

zbawy.exe

windows7-x64

10

zbawy.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    zbawy.exe

  • Size

    55KB

  • MD5

    6f1b07500796c7da985a6ae780957305

  • SHA1

    317769c4e6a6448149e572a180a7b20d8e5c25e5

  • SHA256

    7705160a62f3e21b24d2de7f7bed077198af6184bfeb29cea74ecd931e4cb88f

  • SHA512

    aa3360d8c251e17bf486163d80273a00f7cb98a06eb79c5b8e865d9e95203a767eb738635230f4ee7747906da976c5904c30349e2deedb71c0392d7bcaded572

  • SSDEEP

    1536:/ZOADn6cpNPmSpVcD7iwsNMDUXExI3pmcm:QADn6cPzLcD7iwsNMDUXExI3pm

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

16.ip.gl.ply.gg:25228

Mutex

bfa2a1e1201f79367376bce64d2aa14e

Attributes
  • reg_key

    bfa2a1e1201f79367376bce64d2aa14e

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • zbawy.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections