Overview

overview

10

Static

static

10

spread7765.exe

windows7-x64

10

spread7765.exe

windows10-2004-x64

8

spread7765.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    spread7765.exe

  • Size

    37KB

  • MD5

    feae2bd1fd5794bc78969716cf4f2e11

  • SHA1

    fbe9ddfe0d6a24005e7fe15517923417479150c9

  • SHA256

    b55bca7bfaabbf1af264c7951a2682e2a5e25cdaabd9701f6ec3b4d3c79821fb

  • SHA512

    329d94eee7d8d84a259edc8df75f3ff194c2c4dff6ee50e099517713c67ae4e2ce994eb0fd7e471a620c68d6b1dd1e0f8b0d6ba23feeb4373f2e33f3e9e53829

  • SSDEEP

    384:PcnhyEitfPJWtckUy8fHWHlWe9vuIv3rAF+rMRTyN/0L+EcoinblneHQM3epzX6V:EYzkX8fHWUYuE3rM+rMRa8NuIft

Score
10/10
spreadnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

spread

C2

80.246.81.227:45

Mutex

3712a353b5c320d384c8209b35bc17eb

Attributes
  • reg_key

    3712a353b5c320d384c8209b35bc17eb

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • spread7765.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections