Overview

overview

10

Static

static

10

500002.exe

windows7-x64

10

500002.exe

windows10-1703-x64

10

500002.exe

windows10-2004-x64

10

500002.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    500002.exe

  • Size

    37KB

  • MD5

    31a380e96948363bedcd4fb25635e655

  • SHA1

    80d40cd7c06a523c6bed7863a07c595ac840e65f

  • SHA256

    6a831d82bf0a54a75bd71a0809e265658c79ac5f50122412cf809bd5a3030cd3

  • SHA512

    63c27c66d992223d9047d6b24a5eb8b89c5247c6b93dddd4eba6d502890749d945c329b24eada17861329f863e5f7cd79c39d8e427f0280e9f752c0fb194436e

  • SSDEEP

    384:jRDgIiejjCVLO309Qmykrt6K9syhfUvuuGurAF+rMRTyN/0L+EcoinblneHQM3e6:dSdGdkrUUtUWuNrM+rMRa8NuFeFt

Score
10/10
pc1njrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

pc1

C2

91.168.44.197:45002

Mutex

f2640d3e86fb77d307ef2095b274aeb3

Attributes
  • reg_key

    f2640d3e86fb77d307ef2095b274aeb3

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 500002.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections