Overview

overview

10

Static

static

10

onetapcc -...py.exe

windows7-x64

10

onetapcc -...py.exe

windows10-1703-x64

10

onetapcc -...py.exe

windows10-2004-x64

10

onetapcc -...py.exe

windows7-x64

10

onetapcc -...py.exe

windows10-1703-x64

10

onetapcc -...py.exe

windows10-2004-x64

10

onetapcc - Copy.exe

windows7-x64

10

onetapcc - Copy.exe

windows10-1703-x64

10

onetapcc - Copy.exe

windows10-2004-x64

10

onetapcc.exe

windows7-x64

10

onetapcc.exe

windows10-1703-x64

10

onetapcc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    desktop.zip

  • Size

    44KB

  • MD5

    fa0f5a4814a9392211765a701f5883ea

  • SHA1

    b9b6ee2d24dd0ee6f0ea71c50600862797de87ca

  • SHA256

    9d90cc3c9514f644f4daa0f996bfd7a060208d1f328669fafd171f2b5fd5bd94

  • SHA512

    2baae0c53376a6753d669b638cac7ce0491c9a2c9b70d2d3ca98f201c3143fe457d3b49be45ec9d49520aaf23fccdba972e8d4dc2704402dbceb2f294ff9730e

  • SSDEEP

    768:56eJpUsgTQn6eJpUsgTQ66eJpUsgTQJ6eJpUsgTQn:EsOsvsUsn

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

insurance-smith.gl.at.ply.gg:54779

Mutex

3dcef34885ca46282a173f90b56bcae7

Attributes
  • reg_key

    3dcef34885ca46282a173f90b56bcae7

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • desktop.zip
    .zip
  • onetapcc - Copy - Copy - Copy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • onetapcc - Copy - Copy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • onetapcc - Copy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • onetapcc.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections