Overview

overview

10

Static

static

10

b56be916b1...ee.exe

windows7-x64

10

b56be916b1...ee.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    b56be916b1ca250cd9fe04b283e0c3ee.exe

  • Size

    93KB

  • MD5

    b56be916b1ca250cd9fe04b283e0c3ee

  • SHA1

    8f10d4274fb142a1b296702d5a430e95d3225e9b

  • SHA256

    a1586d89fcbda8b94c59634a7d68ba4b6e884c68a92355c6487068d2212b6043

  • SHA512

    9dce2944f564342862816ee023e1bcf25705cbaf86f282b88ff7b2d76e4946b8531f42f467ed31b11a6f0ff44a81c2fb2ad66206a1178b6a3cf3266990ad0438

  • SSDEEP

    768:oY30wb30YTXspgM0m2zGjpyDtdXWuhtXYLWhyXxrjEtCdnl2pi1Rz4Rk3hsGdpP3:EwT0AA0mT1mrWxL5jEwzGi1dDxDPgS

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

VicTim

C2

hakim32.ddns.net:2000

2.tcp.eu.ngrok.io:19354
Mutex

a1d56127836419435d08d7cc0808a629

Attributes
  • reg_key

    a1d56127836419435d08d7cc0808a629

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b56be916b1ca250cd9fe04b283e0c3ee.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections