Overview

overview

10

Static

static

10

2752-10-0x...ry.exe

windows7-x64

2752-10-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2752-10-0x0000000000400000-0x000000000040E000-memory.dmp

  • Size

    56KB

  • MD5

    a6934d9fdf967c9ef49994f068172e63

  • SHA1

    4629e9d67a1c66d5486e2cdffbe49c69e18a8719

  • SHA256

    f2676e668315ca69d9eeb603c1987dac8bca28371b833f66cc97cb685277dd90

  • SHA512

    77c5f6be0e06c7bc8eef50090339724dd8ccd1d8908e69d2e15f81c870da8e1e218c14ccb5cb9823a841367893455d8ca1913a6843ed4109717e1ec9a90111ba

  • SSDEEP

    384:5L/SHanO4Y7aJMEoeBCsPodxxM2AQk93vmhm7UMKmIEecKdbXTzm9bVhca966r6s:JK/gVt32A/vMHTi9bD

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

185.94.29.109:1111

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2752-10-0x0000000000400000-0x000000000040E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections