Overview

overview

10

Static

static

10

a72038a33b...c6.exe

windows7-x64

8

a72038a33b...c6.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a72038a33b12ef6296c2b3d7434f0ac6.exe

  • Size

    93KB

  • MD5

    a72038a33b12ef6296c2b3d7434f0ac6

  • SHA1

    06396dfa297b07624d483b47d6956860b1f78404

  • SHA256

    a3ffd04cb0f5799fceb93ea650098dcec08da6c6f3304f280beeb2755e6fa092

  • SHA512

    f3972fcc9294eb8dddb25c58cb7d2983bd25b23f55a7886dd426c09ed0dc274bd2e81952d2748ce424d4fcc6b239e45c9ab2eaf7381bfb72d1e36b39e2f34c96

  • SSDEEP

    1536:9bxtHYZpXajhLffhTfRjEwzGi1dDiDhgS:9bxEXajhLhTfui1dke

Score
10/10
ponnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

pon

C2

hakim32.ddns.net:2000

0.tcp.eu.ngrok.io:14834
Mutex

d7ab6ede05457fcfe44e0065f310eb1e

Attributes
  • reg_key

    d7ab6ede05457fcfe44e0065f310eb1e

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a72038a33b12ef6296c2b3d7434f0ac6.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections