Overview

overview

10

Static

static

10

Removent.exe

windows7-x64

Removent.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Removent.exe

  • Size

    257KB

  • MD5

    497e2164bcbe85fea541d2d31ea1206a

  • SHA1

    a3ea9b412bcbf11dd480e129d51645dba704948d

  • SHA256

    82ec1501bc7ec00e6dfd15c7588227107aee7fbc0d14eba3d3c2db2ad113815e

  • SHA512

    e0a37b075b96d0960d0334987517e42fb2fc5bc8cbcad4190df36d98a18bcd3b6c2658f5b51ee9fc54e4bdebf9609139f59f9a314c6189e6342ffe8304e3729a

  • SSDEEP

    3072:mDR0Yi9bK2leZUjwlKLHGrI/gKP0tO8RRndhDbhbVs85/HUyOsVRTIP61N11111r:Rj9bK5ZrrygrZJXtV5PUBsjcsH

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

being-awards.gl.at.ply.gg:7821

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Removent.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections