Overview

overview

10

Static

static

10

Client.exe

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client.exe

  • Size

    93KB

  • MD5

    a626a1bba9318f5e9346c5f79f2ef42d

  • SHA1

    f2818ffeea834ba1a6787594aba002971be9b5e4

  • SHA256

    ad28e10d03d5766c1aec8defa4c91f7ef624ba0c718d2ab633cfcc3bb3e136f8

  • SHA512

    b546b3b62e410c5ca5a13ed0af970b20dc7690afc1055ea9457233a2c2c889b66b0f2b99e6d66069299e323722582162d0470876b6d472e2cb62dfac7d60ecb4

  • SSDEEP

    1536:W6NYl4pXndZcUVrG4AFjEwzGi1dDgDhgS:W6NpXndZcUVBAyi1due

Score
10/10
savefromnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

SaveFrom

C2

hakim32.ddns.net:2000

23543254365-58443.portmap.host:58443
Mutex

fc02c0f3a38951ea6913ba09282dfc33

Attributes
  • reg_key

    fc02c0f3a38951ea6913ba09282dfc33

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections