Overview

overview

10

Static

static

10

FPS Up.exe

windows7-x64

10

FPS Up.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ac413ab8ba55796f267775da3741e26

  • Size

    14KB

  • MD5

    4ac413ab8ba55796f267775da3741e26

  • SHA1

    88089b706f72622308eca02b7ecb49ac2ca40f81

  • SHA256

    cfb904b6d56e8909d45867d0683a0ebb17b59b56a7a86f2777e1dedd6523148a

  • SHA512

    4379c0b89b7d94e46dda81c49ea7ed07a1480f0981c2937baaf3ee6242236d3373e9ca929dd386c4abaab80d4778718d16f92b9054bb5e809521ce75c8cc5b10

  • SSDEEP

    384:Fz/ubx+TTSnF8JA7vUH5wa7PNw+4Su7gSXDZb:t/+xss8JAzUZwacWmZb

Score
10/10
rolknjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

ROLK

C2

25.64.233.211:7777

Mutex

8331a4769e619f3711cda4ccf43ac893

Attributes
  • reg_key

    8331a4769e619f3711cda4ccf43ac893

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ac413ab8ba55796f267775da3741e26
    .rar
  • FPS Up.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections