Overview

overview

10

Static

static

10

3012-54-0x...ry.exe

windows7-x64

10

3012-54-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3012-54-0x0000000000A80000-0x0000000000DF6000-memory.dmp

  • Size

    3.5MB

  • MD5

    c173e009f857545429260b6b57a0798a

  • SHA1

    77ba6b4410d0c5e3c8e12771585c7e17e7218a35

  • SHA256

    d98fb691391b5664f98cd3da1849952ecb87a37c17be749f5cee2ec6628e46c5

  • SHA512

    3c77d382db3280bc9150a872343ab13dd383135da2a5919b2936640082bd4dabd4d791b24e111d73b710738bb7a9f3865289ea2565a634ebcb4d56a89103211b

  • SSDEEP

    49152:wagR9UilZ3omMTlIb5oSetC+PdltkCu/BaC8UWF:wZ9UwjoI6SEC+LtSZax

Score
10/10
njrat

Malware Config

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3012-54-0x0000000000A80000-0x0000000000DF6000-memory.dmp
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections