Overview

overview

10

Static

static

10

Payload.exe

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Payload.exe

  • Size

    27KB

  • MD5

    fb1f856e1ed533f281776173a203dc06

  • SHA1

    174952403063d46a9ac1198cb1013ffd802753b6

  • SHA256

    52520b2e51f046dea5b5ad03b74dbaad48f65f4c23ccac6374cf102e918ca8a0

  • SHA512

    883f0fe7ce6552a82527935bfe9613494c03411c020c01cec92111991c6324c73d4d783c8c714cc4d7d4f45ed5eea11dfeab51e7d88044e3e8b4a44e6832961a

  • SSDEEP

    384:DL3yBE5x9Jlm4A/WVUcsICIPUdRtMCAQk93vmhm7UMKmIEecKdbXTzm9bVhcaE6x:HanQBdCA/vMHTi9bD

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

sdg7.ddns.net:80

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Payload.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections