Overview

overview

10

Static

static

10

NEAS.20b06...JC.exe

windows7-x64

10

NEAS.20b06...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.20b06a72b000ed9c2d9db774c543202171728537aa4a43a7c8b5fdab7bf026c6exe_JC.exe

  • Size

    65KB

  • MD5

    b1290bf36ae40c7d6ac7dfac9f399848

  • SHA1

    fbcfebb104fe31aeae0a24b3bd28d92280f012aa

  • SHA256

    20b06a72b000ed9c2d9db774c543202171728537aa4a43a7c8b5fdab7bf026c6

  • SHA512

    e76d15ca4fbc01ef955ad08bf5cd8725ce1e709f17ae1929dbc79afba51f77c9d39050d3edbe0757397312b0a75598f569254fb067aec0fb7af537617180e240

  • SSDEEP

    1536:lcxR4cEoN36tLQviFw1iW6SBnvb0fLteF3nLrB9z3neaF9bNS9vM:lcxR4cEoN36tLQviFCbhBnYfWl9zuaFn

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:1604

Mutex

RuntimeBroker.exe

Attributes
  • reg_key

    RuntimeBroker.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.20b06a72b000ed9c2d9db774c543202171728537aa4a43a7c8b5fdab7bf026c6exe_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections