Overview

overview

10

Static

static

10

0a57a39616...a1.exe

windows7-x64

10

0a57a39616...a1.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a57a396163e5ec44ecd2fb4e59db4a1

  • Size

    23KB

  • MD5

    0a57a396163e5ec44ecd2fb4e59db4a1

  • SHA1

    f917cff8500b32b1405b914512e263a064fa904e

  • SHA256

    7bf2d1167b4cd57a72aa1c34b2c3f978ed42569ff0494411af164b1ead715466

  • SHA512

    04f4bacaa05ae7be4fae03f89cc24cde8612cad6417d653d30c0a37ca4178824f80332f1bf92448cf0099ff5fe4de0f3d188cc37308f8ddc5e97acda4b4047b1

  • SSDEEP

    384:rfQ+ILgIbOprgPsUOSU0kB1kd6dg7GYh/JomRvR6JZlbw8hqIusZzZTLH:ryLL6MVU0NRpcnuw

Score
10/10
kavachnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

kavach

C2

149.248.52.61:89

Mutex

7115957173d2bd058f96a963a8334ea1

Attributes
  • reg_key

    7115957173d2bd058f96a963a8334ea1

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a57a396163e5ec44ecd2fb4e59db4a1
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections