Overview

overview

10

Static

static

10

b36df944b4...b0.exe

windows7-x64

10

b36df944b4...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f187dc908dbe5718d33bc8f966a947d0.bin

  • Size

    11KB

  • MD5

    87e99b8924937cccd10635740fa11993

  • SHA1

    31ca4d8f341161be3f255b89923cc1368ad1db7c

  • SHA256

    0b0231d2c71b8c3efbb54fb80c25a2323f0f3e584d85e8cf64a7bc6df818bc33

  • SHA512

    80ea35180cc7d07bee667cf11a71400438aad0e3a0cd7b494ad81b772cbbf93337102bf064afabaca96cb82ba4590a4e0bde6d2e96a9e88d81a5c169b10719b5

  • SSDEEP

    192:+kCuUfvw9HkwfAJqclNC5ddwXd0aum5UEzsBtrAZ7hWdlC3fr5yeuQ7:+CHdqdlNMwv5UEIwZ1qg3j5

Score
10/10
29/05/2022njrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

29/05/2022

C2

chromeupdate.serveirc.com:1010

Mutex

b49522f7df562e692797cebd52585519

Attributes
  • reg_key

    b49522f7df562e692797cebd52585519

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f187dc908dbe5718d33bc8f966a947d0.bin
    .zip

    Password: infected

  • b36df944b495ce1289b7a181be61d4cf78e212c60d56eafdcb24fecd99f014b0.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections