Overview

overview

10

Static

static

10

start.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    start.bat

  • Size

    93KB

  • MD5

    105c9f747e5d2bd36fdce18b6dbafd63

  • SHA1

    8293870788953fede1d86c66c426f35bed642828

  • SHA256

    32655fdceba527fff7835e241680f106889cee2780c334dc189bb9ffa5426e7b

  • SHA512

    65420a8af616f612851bec10d42714f159b5672f41c5c2bfa27a183dd8a3dbea6907a1ab5050aa832d29f9e9ce8e4104c935802e1a27d719392b6c45d6eddf09

  • SSDEEP

    768:RY3mO7yZnDQMMpAZrGSt6udttXy4sahkGJiXxrjEtCdnl2pi1Rz4Rk3ZsGdpWgS7:JO+ZD3rGWNd7dhkhjEwzGi1dDJDWgS

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

2.tcp.eu.ngrok.io:13557
Mutex

51e6f96c3b29e130249f627dbaa4ddea

Attributes
  • reg_key

    51e6f96c3b29e130249f627dbaa4ddea

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • start.bat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections