Overview

overview

10

Static

static

10

Remoteatexe.exe

windows7-x64

Remoteatexe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Remoteatexe.exe

  • Size

    31KB

  • MD5

    ef44c71074cf9d5f71f12ffe3422ad17

  • SHA1

    430bbbb549d84c24ef3c78614c122f1d149cf4d7

  • SHA256

    c1593c5e655ab7726ea45770441fcffca42a417d7ee33fbbfe3091479f5fc032

  • SHA512

    84b0c9ae6d79b3b54f3859a9e3a2d6308c69eaf304825c4e6e92808d371307033b1f7f98f907dd3f2588744699c0bf59a372dfcbd8b4c3a934157e56a4c6047b

  • SSDEEP

    768:8zBHIZBDTuzxZ+K18z/SpHvMIQmIDUu0tiYhj:Qc6HhdQVkdj

Score
10/10
usernjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

User

C2

PrivateKey-41054.portmap.host:41054

Mutex

6de25363d8d0f20b8354f9b7c54c6fb7

Attributes
  • reg_key

    6de25363d8d0f20b8354f9b7c54c6fb7

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Remoteatexe.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections