Overview

overview

10

Static

static

10

9e5c66c629...cc.exe

windows7-x64

10

9e5c66c629...cc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e5c66c6299853710ac564d689c077a332ab91cdc7f75d7d2f9637a1bec1cfcc

  • Size

    23KB

  • MD5

    c485544a49778db3665031c13d8aced3

  • SHA1

    1165b5dbb9fd757a4eb1526154813b5a678f084c

  • SHA256

    9e5c66c6299853710ac564d689c077a332ab91cdc7f75d7d2f9637a1bec1cfcc

  • SHA512

    aaef98790d5feb140dc1eedb0a2ff3387ec1dff0a8d258132c859d195f94ec36312157b3e57255ae3feaf7a52a28230d08f44c9ebf5c13a2129e38f4c868b815

  • SSDEEP

    384:DtsqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZHk:DWf65K2Yf1jKRpcnuf

Score
10/10
windowsnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Windows

C2

127.0.0.1:7777

Mutex

c9c45e4fa4d376beb58238c2560ef2c6

Attributes
  • reg_key

    c9c45e4fa4d376beb58238c2560ef2c6

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9e5c66c6299853710ac564d689c077a332ab91cdc7f75d7d2f9637a1bec1cfcc
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections