Overview

overview

10

Static

static

10

rep0rtso2cheat.exe

windows7-x64

10

rep0rtso2cheat.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    rep0rtso2cheat.zip

  • Size

    33KB

  • MD5

    3b3932f4ee9ab9ffb22f30c848d16e0e

  • SHA1

    2659d3d377c1b624d3814ac2af817c0e74a27211

  • SHA256

    c45c04dc7c6fcd7b75f1117bebd64d5a8664a4a0a08d3b2a82fee1a954582e9e

  • SHA512

    29556e93c8b7950d7d6728f9518988b895a059dbf7d4a90cb274ed66f012cc8979df5d528135b1bb6061d5ed20d2e0faeafb2512397bbb06146bfd5e9455a298

  • SSDEEP

    768:OGM/MCzPRx2f+sDZ4Mtt1+feuBElqgu7mLth:GUCTr/+1t3SEZ9f

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

127.0.0.1:1604
Mutex

e432ab28cd319f03ba0306427ff4d45b

Attributes
  • reg_key

    e432ab28cd319f03ba0306427ff4d45b

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rep0rtso2cheat.zip
    .zip

    Password: infected

  • rep0rtso2cheat.exe
    .exe windows:4 windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections