Overview

overview

10

Static

static

10

NEAS.8bf97...40.exe

windows7-x64

10

NEAS.8bf97...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.8bf97c102860a5d59592ba81da3b8440.exe

  • Size

    37KB

  • MD5

    8bf97c102860a5d59592ba81da3b8440

  • SHA1

    9f4a37397f19b81308bed892c330674436e5e7b9

  • SHA256

    223423935f17b043073c597f83c084125c6221da3d4e66eb0a5615a62ab21575

  • SHA512

    d0de7228a1c2095e51bb6511c00d8908c23bc7e337e7f95494e570a098cad1cfef7217d76b6734b1301e907989176df7ab2ccb97a674ba0d4c0c79477e93c4cc

  • SSDEEP

    384:lWraoixJ9l7OHg1WykrFV3pk8emfzArAF+rMRTyN/0L+EcoinblneHQM3epzXGNa:Ur+R1NkrFV6NmbArM+rMRa8Nu4wt

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:5552

Mutex

46a3a51736271fad468f564c59b40fc6

Attributes
  • reg_key

    46a3a51736271fad468f564c59b40fc6

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.8bf97c102860a5d59592ba81da3b8440.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections