Overview

overview

10

Static

static

10

better.exe

windows7-x64

10

better.exe

windows10-2004-x64

10

better.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    better.exe

  • Size

    37KB

  • MD5

    321798c3cc55842f3734c791ce3a4685

  • SHA1

    69a93a563ddcb9c5c12e578922366d24c99ae0e7

  • SHA256

    abfd199993bf157e715b38b597954a2b5ed4b6dccb2c4a0f3fb0fac40b42007f

  • SHA512

    199e7521604734bd5fd6fa2046457ea874a1627ae03797f41b8a73f8c6e4a26e03e8ef81e9b97798d89770d62daf0b06de700c74e477adb7a0431c3f84c88645

  • SSDEEP

    384:D99aUiD9blmJEpRGyEfr5fZuACYaSMlrAF+rMRTyN/0L+EcoinblneHQM3epzXtu:p9iHpR9Efr58AClSgrM+rMRa8Nur6t

Score
10/10
problastnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

problast

C2

80.246.70.38:45

Mutex

2ab8c5833320728337fe88f537ae5d6c

Attributes
  • reg_key

    2ab8c5833320728337fe88f537ae5d6c

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • better.exe
    .exe windows:4 windows x86 arch:x86

    Password: odtefsdklfei85489tu9487589ewoifjeuitidgj9d8ty89ety894er

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections