Overview

overview

10

Static

static

10

bTsx.exe

windows7-x64

10

bTsx.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bTsx.exe

  • Size

    23KB

  • MD5

    1b8c2a6753fdc3fddc2c6eec9f6f6609

  • SHA1

    1654029a5e9784ebba410a1476ca75c291fdf3bf

  • SHA256

    5839b984aaa69c0df2e7803897dd293f8b3499a30ecee0734369b823c26472ee

  • SHA512

    8d95d8e244e0c1fa251efb2f82748378403e1dc0130695766876c158f5ab2560b5100f325b4f7c8b61bfba5e9976e2fc256a85e9d7015a1b65349c10ac6c0388

  • SSDEEP

    384:mGwz6+T4IjWZFNwXU0eiNUBdvt6lgT+lLOhXxQmRvR6JZlbw8hqIusZzZ7k:STbC81NgRpcnuT

Score
10/10
hotelnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Hotel

C2

191.233.28.7:1024

Mutex

240a11a4369c749c42e89558b6a85116

Attributes
  • reg_key

    240a11a4369c749c42e89558b6a85116

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bTsx.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections