Overview

overview

10

Static

static

10

onetapcc -...py.exe

windows7-x64

10

onetapcc -...py.exe

windows10-1703-x64

10

onetapcc -...py.exe

windows10-2004-x64

10

onetapcc -...py.exe

windows7-x64

10

onetapcc -...py.exe

windows10-1703-x64

10

onetapcc -...py.exe

windows10-2004-x64

10

onetapcc -...py.exe

windows7-x64

10

onetapcc -...py.exe

windows10-1703-x64

10

onetapcc -...py.exe

windows10-2004-x64

10

onetapcc - Copy.exe

windows7-x64

10

onetapcc - Copy.exe

windows10-1703-x64

10

onetapcc - Copy.exe

windows10-2004-x64

10

onetapcc.exe

windows7-x64

10

onetapcc.exe

windows10-1703-x64

10

onetapcc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Desktop.7z

  • Size

    10KB

  • MD5

    dba843d15f6e9a5c9119709dcb39bcdb

  • SHA1

    de2a8f15b97eda7e1b2c9d1f1a1b1912c357433f

  • SHA256

    0d10d613ada5122fe554cf22ab5dd977076198a1e80a9590ec810ca345143c5d

  • SHA512

    1c6696caeb757191d40d36438fd781bfe4f83b1af45076ba65b791bcd1b0808ddbd257310822e51eea7299e3bf7a5f02780e0c73323a9df7c63d9266f52a7730

  • SSDEEP

    192:GsfFvqE+PnBXyfxKB2Yruswjj3LwiDebs3KHtf7W1x:vfAdxKInuswH3Lr93U7Ex

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

insurance-smith.gl.at.ply.gg:54779

Mutex

3dcef34885ca46282a173f90b56bcae7

Attributes
  • reg_key

    3dcef34885ca46282a173f90b56bcae7

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Desktop.7z
    .7z
  • onetapcc - Copy - Copy - Copy - Copy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • onetapcc - Copy - Copy - Copy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • onetapcc - Copy - Copy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • onetapcc - Copy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • onetapcc.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections