Overview

overview

10

Static

static

10

Server.exe

windows7-x64

10

Server.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Server.exe

  • Size

    112KB

  • MD5

    865deeb49bc8ba11a668909129e78c01

  • SHA1

    2774b461cabd9d69ba45fbebba6b247902c59c9f

  • SHA256

    9f453c47400d7a75c4dec4232b6b633662af9f8d3bb34212ff5d7e1818a280a3

  • SHA512

    64ce0c01a129a7a11770252ccd7d8b989ed353e688e6addaa8e4fa8d468c9be40c0543d7575fd12d57d69c17a65f97c41e1100e9bd25fa91be84c59a3a75b8d9

  • SSDEEP

    3072:s3oU49/91oN36tRQviFC65Bn7fWl9zxaF9bLYvMQxaJVYYPwta:s3+A9zpvMQxowt

Score
10/10
mybotnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

MyBot

C2

127.0.0.1:54077

Mutex

NisSrv.exe

Attributes
  • reg_key

    NisSrv.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections