Overview

overview

10

Static

static

10

x6MPVreS87fF.exe

windows7-x64

7

x6MPVreS87fF.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x6MPVreS87fF.exe

  • Size

    78KB

  • MD5

    11f51103b0503a907f2fe737effcba23

  • SHA1

    5519cd0e85228fbc49bc1a14a24785435b184ca4

  • SHA256

    7598961daa8affac4886d4aface1b5cbae1500e386ac42cafca7fc3d9ae5f6c7

  • SHA512

    541cd78f3f0aa511aaebcae15cac44f1d1c446162b6f56aee6cb62b5d408acbedf5a587bbedd2cc58d4b0c99f671b7e68a56248064b4ee4f97138f9fffd94a17

  • SSDEEP

    1536:gt6+6Y9yhU19DppS5wpOk3JCK6pFNmXd6fOpd/9nEh9TGKJYR:nhU19QwpOk5CK6XO/9ESKJY

Score
10/10
limenjrat

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Lime

C2

gremabenj.duckdns.org:3110

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    8520

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x6MPVreS87fF.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections