Overview

overview

10

Static

static

10

NOT A VIRUS.exe

windows7-x64

7

NOT A VIRUS.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4693578ea4ae9212aa51d50c21adac0f6dcd9a7014d974d2e0425328b84e9149

  • Size

    62KB

  • MD5

    9a790984db998c15e089ca5156d80e67

  • SHA1

    034deacf3152e7602166d8018845920d55054123

  • SHA256

    4693578ea4ae9212aa51d50c21adac0f6dcd9a7014d974d2e0425328b84e9149

  • SHA512

    5c8d9e30c5e7c363ed484de1dfcede4cfbf9a4cbdb8dce145642f7ab6c5131a29c5c1d0bf8c0ef35a0663f0064c90c1a8c1c04565720343ac64a19697b97e83c

  • SSDEEP

    1536:A/Ay3X7c4UKBAM9Q0+eVXx/1PLyFrb7sh:A/AWX7c4UU96chRAsh

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:12607

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4693578ea4ae9212aa51d50c21adac0f6dcd9a7014d974d2e0425328b84e9149
    .zip

    Password: infected

  • NOT A VIRUS.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections