Overview

overview

10

Static

static

10

2308-17-0x...ry.exe

windows7-x64

2308-17-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2308-17-0x0000000000A70000-0x0000000000DEE000-memory.dmp

  • Size

    1.1MB

  • MD5

    ddc53b3df2f3719efa4fb95d8c829424

  • SHA1

    2ad095fbaa03c4c745ac860f231f8be41d515324

  • SHA256

    5823f29ae3ab547994cb9a77c6cff8c125f7121067f89dcf53050ac1ac399fba

  • SHA512

    108d850205b61917ee132533657a6ef0b8f40e164e9ffa19460f85f75b399b20aaa0c13ee9aa93838ac17fa9aea479a2dcf617d7b5cba7afb21ac3f9daf5c560

  • SSDEEP

    24576:lLB6+gW/Ai2OfzAq//18xxYEuhkgAfz1N9/1:lLVfEifhbkz51

Score
10/10
njrat

Malware Config

Extracted

Family

njrat

C2

hakim32.ddns.net:2000

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2308-17-0x0000000000A70000-0x0000000000DEE000-memory.dmp
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections