Overview

overview

10

Static

static

10

rat.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rat.exe

  • Size

    66KB

  • MD5

    72987a53a20a02db52b99bef93b8f8d5

  • SHA1

    5420c2604ba7452c3f63d1e50ceb2509988c683f

  • SHA256

    51ae8485f908401efbd60cab4b561dc3932cc8e938e6f700974eec5bf63d8367

  • SHA512

    bc75e62d94ba41bd05fbff75a84ed18e38c3db1e680d25ff837e0e678ce2e4520c157541dcee6b366ae0d5be93efa601a852258f2d1e71ae5115c7a901f6b5e5

  • SSDEEP

    1536:FRjSzePoN36tkQviFw1K3jwBnvAsfLteF3nLrB9z3nxaF9bXS9vMQ:F5SzePoN36tkQviFC+UBnrfWl9zBaF9Q

Score
10/10
mybotnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

MyBot

C2

127.0.0.1:54077

Mutex

wsappx.exe

Attributes
  • reg_key

    wsappx.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rat.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections