Overview

overview

10

Static

static

10

5Jk8N7qN.exe

windows7-x64

8

5Jk8N7qN.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5Jk8N7qN.exe

  • Size

    29KB

  • MD5

    8fd8e85a8db28bf9cb98d339b6516e57

  • SHA1

    65a1b52fffc4af77e3cdcf603ed15a5e5bf9e8b3

  • SHA256

    d292286a614b1c35f42ea04335bab20018d7f5e67451fcf653facef327a8721a

  • SHA512

    658b1a5ebc8abdb472ec2f498b6844f7dbc91cee1482ea9fd0b9f908565b9369462ee71374a97108b2822a34a4b8e0a0d4e489fd0fc9719f5caf1e1a842fa80d

  • SSDEEP

    384:uSItl77FDFucYfKQCcTV/5pzp8OmqDCdRe8kGBsbh0w4wlAokw9OhgOL1vYRGOZ7:s77ucYfKQT1Pp6qqReWBKh0p29SgRn3

Score
10/10
56307njrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

56307

C2

keep-carbon.gl.at.ply.gg:56307

Mutex

ba4c12bee3027d94da5c81db2d196bfd

Attributes
  • reg_key

    ba4c12bee3027d94da5c81db2d196bfd

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5Jk8N7qN.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections