Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    smbi.exe

  • Size

    40KB

  • MD5

    e6c5e24a83092e27e7ff1933172f0ce0

  • SHA1

    518131403552cafdb6ad32aea57c77995f82c970

  • SHA256

    080f13f7f420b9e21ce8b301fe6b6a28389e1b4dc23654dc9d7819deb1e60053

  • SHA512

    50b70dc55bebe62fd6a4aeb33910f82c41f5d829533d89a96cdc0d1f7b815d936b86e2ffcc20fc4805862ae915dd6642320b53476e1f6e04839180eaa0554122

  • SSDEEP

    768:ECagUtfsy9//qyuD8fZ5CYaDHEgvP2w9onj7N2:ECaXl9AOz6EgvP39ojo

Score
10/10
hacked by lotusnjrat

Malware Config

Extracted

Family

njrat

Version

Lotus 1.2a

Botnet

HacKed By Lotus

C2

192.168.56.1:5552

Mutex

avp.exe

Attributes
  • reg_key

    avp.exe

  • splitter

    |-L-|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • smbi.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections