Overview

overview

10

Static

static

10

a8de9617ea...94.exe

windows7-x64

10

a8de9617ea...94.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a8de9617ea415b5192f439ff6ab96294.exe

  • Size

    160KB

  • MD5

    a8de9617ea415b5192f439ff6ab96294

  • SHA1

    30b917dd4479c4944ab97b806c5ec1de9657e3c2

  • SHA256

    4fad16bbb59875a3c26bb8b202abffd86217db7462463fece59db8f7aa0f99b9

  • SHA512

    ebafd3a1b6e5feea3525e3d6c235e65535529f2e1fc6f833611ee199aee050ffe55f2312bca9f796c4f8a14ebc8e5bee5cc99c44c3d3a1e0b44c838453f0b14b

  • SSDEEP

    3072:9ZfeA/+yJGhS5gx7+gHMhi2W1QfA7LjxAJUfop7opolxh:PfeD/S5tpYQf+u/p8m

Score
10/10
sourcenjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Source

C2

three-bands.gl.at.ply.gg:24544

Mutex

c132c845ddc1e459ea58e893b14f206b

Attributes
  • reg_key

    c132c845ddc1e459ea58e893b14f206b

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a8de9617ea415b5192f439ff6ab96294.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections