Overview

overview

10

Static

static

10

4888-18-0x...ry.exe

windows7-x64

10

4888-18-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4888-18-0x0000000000620000-0x0000000000630000-memory.dmp

  • Size

    64KB

  • MD5

    63f4fb3117eec7a76778044173801874

  • SHA1

    bf5b1e828352f3dc70f6587df7d6139868c6a06b

  • SHA256

    63e968863f16c246ed6aedb0571d2a00ba906102e2ca8053555ff8dded8a256f

  • SHA512

    618a6a4ab7ca55ec1ff9a1fb8a34b8d3281bc39f8de1c7685f439239fd8515047ca66960e94493d0d8efa526b44e5547f5cc73a6f9982560b89935b0ffec9b97

  • SSDEEP

    768:MC9K6MpN/BizxNOZBs9RSLJFTvTJQmIDUu0tiBhjrY:D7gUczJtQVk+jc

Score
10/10
njrat

Malware Config

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4888-18-0x0000000000620000-0x0000000000630000-memory.dmp
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections