Overview

overview

10

Static

static

10

315d1a63a2...0b.exe

windows7-x64

10

315d1a63a2...0b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    315d1a63a2bc29a5d445037c20130c0b.bin

  • Size

    31KB

  • MD5

    315d1a63a2bc29a5d445037c20130c0b

  • SHA1

    76d698bc110d2fdc70a0184d41a8cb469b0be876

  • SHA256

    fd7f387b6382cd996d317b968f997bad9b1fbc2db711585cf2a73aed058888a7

  • SHA512

    4b86d30ed839ea7a14a91cb4d810c7ec86366f9ce3b3f6539831254b8746916d153617d70a5dbee98c7fcbdae14aaccac68b38a05a9d96b9318c098fab90cb19

  • SSDEEP

    768:vGMv+ZW1nRNAzx7SnI1OfoFLhvi0QmIDUu0tifmj:eMS2a9RLQVkzj

Score
10/10
mybotnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

zobhumide.duckdns.org:1608

Mutex

74d2645fe1e6ef320767741b6f659a39

Attributes
  • reg_key

    74d2645fe1e6ef320767741b6f659a39

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 315d1a63a2bc29a5d445037c20130c0b.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections