Overview

overview

10

Static

static

10

bSZ5.exe

windows7-x64

10

bSZ5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bSZ5.exe

  • Size

    23KB

  • MD5

    eacb20b5a184227ae34cd5bdd8eedd7e

  • SHA1

    eaed2ff22a2fee9ed146ae0de01e9cdc6de79408

  • SHA256

    48482ccafcfdb92783fefa191740172e30ebe618f7a77704a8223047b021a6e6

  • SHA512

    3636d1b48e7ccfa8daf6647f9141f975efe7146079e5052de7a982bb36abdb6b9f86f707e030d37b41aedc6a69f8bee131be01a06a2fee01437c7860b2fb5c9c

  • SSDEEP

    384:rMKFYuEEhERvoBG16Xuy0MHNw6Tg1Y+75JTFmRvR6JZlbw8hqIusZzZON:AW4V6+yDRpcnup

Score
10/10
vitimanjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Vitima

C2

spykronic.duckdns.org:1177

Mutex

124fd7b876c3b2e4e908c5407f89ffcd

Attributes
  • reg_key

    124fd7b876c3b2e4e908c5407f89ffcd

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bSZ5.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections