Overview

overview

10

Static

static

10

ff09dc87f8...95.exe

windows7-x64

10

ff09dc87f8...95.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ff09dc87f87aa0fbf68da1f59801631754fd8e09504e9f7ca8cdb3e1e668f795.exe

  • Size

    43KB

  • MD5

    1ea3ab01dba313128ff4fe09a33db738

  • SHA1

    9346789e7661e606ef10727b060b073cca6c5f29

  • SHA256

    ff09dc87f87aa0fbf68da1f59801631754fd8e09504e9f7ca8cdb3e1e668f795

  • SHA512

    ae1b36de6507fa4e57e27d6f691660a28fd5f8bdea66a55f852d11b4ed4f68f40e5d432cc2fec1ac19625e7872715cc41212cb553388c6b1a5e405da74368c5d

  • SSDEEP

    384:gZyq6NUst+3gUy6tZFIEEEoHjtJEzQIij+ZsNO3PlpJKkkjh/TzF7pWnv/greT0k:GqwQh6PFtkjGuXQ/oG3+L

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

7.tcp.eu.ngrok.io:14752

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ff09dc87f87aa0fbf68da1f59801631754fd8e09504e9f7ca8cdb3e1e668f795.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections