Overview

overview

10

Static

static

10

ЧЧЧЧЧ...Ч.exe

windows7-x64

ЧЧЧЧЧ...Ч.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧ.exe

  • Size

    93KB

  • MD5

    5f889a808b1d12293f2658045390d8e6

  • SHA1

    ed128781d8aeecb6cc999ad6d0172fe30ec1b5a0

  • SHA256

    b3cc859e80d3e9c997aa60af795e4f26d809682b2a87547f7b0788843c38b4ff

  • SHA512

    d0b23b925f408ad1564c9f0577108918728b391c377c8e9434cfb8e5cbf268dcc7718450568c2bd3e833e3d4eecaf95431c78a8c41eda581b0b0dc6664e0442c

  • SSDEEP

    768:5Y3k/nD9O/pBcxYsbae6GIXb9pDX2t9hPL0OXLeuXxrjEtCdnl2pi1Rz4Rk3NsGK:f/xOx6baIa9RUj00ljEwzGi1dDdDMgS

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

6.tcp.eu.ngrok.io:12026
Mutex

d56a60e550730a7ac36764ae30895634

Attributes
  • reg_key

    d56a60e550730a7ac36764ae30895634

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧЧ.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections