Overview

overview

10

Static

static

10

5fc26c8d1c...60.exe

windows7-x64

8

5fc26c8d1c...60.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2eb8399541a38d7411a8da9ad54603f5.bin

  • Size

    34KB

  • MD5

    3b8170109979691efff068a54c9376ea

  • SHA1

    f04d7c52834bebf75246c7ce4aeefb8dcfed55c6

  • SHA256

    7c05112e972bab27b7e734e42425a8cb6feb65afc636a07520bc1941b8ae57af

  • SHA512

    e6a0d19564339e6b14f633eeaea847913516bb00bb6cbbc1b6df6dedf47285a1586cde280be976ee9b621e92a0a397d687bb1c3c1d8e18b2619de98000785b33

  • SSDEEP

    768:H3T3WoRjmSLpu6MAqjP52UEw0N670bS2RK+gbUjvlOIQtK+pJeA1rWvwPy:XTmkLsfT52U0hu28UjvXpYd1rRy

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

6.tcp.eu.ngrok.io:10298
Mutex

1a33d12f87a2ed3cb967309586bdcce8

Attributes
  • reg_key

    1a33d12f87a2ed3cb967309586bdcce8

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2eb8399541a38d7411a8da9ad54603f5.bin
    .zip

    Password: infected

  • 5fc26c8d1ce28ed2277905a966ec30e9f157e14cb19fed06deaeac5500add460.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections