Overview

overview

10

Static

static

10

bc9c846acf...94.exe

windows7-x64

8

bc9c846acf...94.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    017fa7a20c92152e2a5533f75f090469.bin

  • Size

    34KB

  • MD5

    1ad3e78de9a9dc546a6da32522b80344

  • SHA1

    b4bfeead9ab32d476ba3b3c3843eae54db1c9202

  • SHA256

    eb8340a8de898bb8e193469e8abb1781ce0d2d55b8970b6d6521af692dd590de

  • SHA512

    71c5e4174ca4d294ac3f2fb4c54621ac9b1f2b1019515f28099626b0ebb2ef0abf40a2d72aefd579f56a24664528441fa911e666ac54d44e007519b24905f4a4

  • SSDEEP

    768:xJgBrFpVjwHttnY68VzC93p+ASbCQMHVkahYmkU3ywuJUwkj:xJWpVjwznY3k4ASbCHk3mkS

Score
10/10
лошокnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Лошок

C2

hakim32.ddns.net:2000

0.tcp.eu.ngrok.io:19067
Mutex

03c49c7f7bdfd684069ba84c510171c9

Attributes
  • reg_key

    03c49c7f7bdfd684069ba84c510171c9

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 017fa7a20c92152e2a5533f75f090469.bin
    .zip

    Password: infected

  • bc9c846acf87982d46c27024cd876656135ecffa39bd5406beb77af3df215e94.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections