Overview

overview

10

Static

static

10

Remoteatexe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Remoteatexe.exe

  • Size

    31KB

  • MD5

    c6a1298033a1201c9cc5353991f542f5

  • SHA1

    31cd2e7bb480ddd24cf264646870c84040cd27fd

  • SHA256

    0711d817509232c7a8c7d02d0a91bac2378e38fd9a8030fb402515a0045081e7

  • SHA512

    51872170804dd0a41507c0bdd81b9eb5745d725d19cb759eaa70587e893bcef56b1e8bd5b3406f610922706fe470b86b42598bf9c4d7bf69ba6fe0bebe720be1

  • SSDEEP

    768:azjHIZBDTuzxZ+K18z/SpHvMIQmIDUu0tiddj:Mc6HhdQVk6j

Score
10/10
usernjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

User

C2

PrivateKey-64986.portmap.host:41054

Mutex

1420d5b5590adca79340e048eacf8092

Attributes
  • reg_key

    1420d5b5590adca79340e048eacf8092

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Remoteatexe.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections