Overview

overview

10

Static

static

10

Server.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Server.exe

  • Size

    37KB

  • MD5

    88b22fb58bd7e2ac131bfc49808e06e8

  • SHA1

    c000cc37a77741f2d1d02861860ec4bd6cbed328

  • SHA256

    bbf94aebd59abdc5206967cae18b97d20e97931462e4ab6843726fe8b27f5453

  • SHA512

    d5433302ef4a5acd796237b484bdfa404f8373b76ae262efeabb0eeacd661a55f1af5172ab3532b0fa8f300192ebaa3dd29a291bc086045af9de3afc395b523f

  • SSDEEP

    384:yhlepaNitlFbOn0aH2ykrqbsXhZSzksIPGrAF+rMRTyN/0L+EcoinblneHQM3ep3:IlP+NWtkrqbsRsAsIurM+rMRa8Nu1xt

Score
10/10
hciednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HCIED

C2

6.tcp.eu.ngrok.io:18989

Mutex

35833e2a6558e292f1b0ff65911ef12e

Attributes
  • reg_key

    35833e2a6558e292f1b0ff65911ef12e

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections