Overview

overview

10

Static

static

10

damagerX.exe

windows7-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    damagerX.exe

  • Size

    93KB

  • MD5

    444a7563c698a898882bf88891a87048

  • SHA1

    f7d641750da4474dd2210d63c91715b95a66824b

  • SHA256

    15a42eef9d6d3ad7573a5b10f23088d7483c5e9f968eabaaa3867ca17e706e08

  • SHA512

    a8584f19834510998457d38b050f4ce8d3d64f5dc0c9291c01788ebfc6a90a78ee82a6e5d8abc4779f5d2e2f94671692909285bde7fe69eb6d7d29c8b33c5e92

  • SSDEEP

    768:uY33C5hWXxyFcxovUKUJuROprXtwN8eYhYbmXxrjEtCdnl2pi1Rz4Rk3osGdpAgM:1CHWhIUKcuOJnPhBjEwzGi1dDADAgS

Score
10/10
damagernjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

damager

C2

hakim32.ddns.net:2000

127.0.0.1:5552
Mutex

254bfd42e4412d1a898aca57e8ba653b

Attributes
  • reg_key

    254bfd42e4412d1a898aca57e8ba653b

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • damagerX.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections