Overview

overview

10

Static

static

10

NotRat.exe

windows7-x64

10

NotRat.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NotRat.exe

  • Size

    93KB

  • MD5

    0ebd680bc1972bce577e5c5fa67eea56

  • SHA1

    e1344c959019f61bf20135b04fa2041ba7e36d59

  • SHA256

    57d25d3e782ce64fb32619a73836417facd4339c85591c16fc2fff2acdf9bebf

  • SHA512

    23b7872979d3bc07f345d8424f6fb366a5a37da99b626fe4d14703b620b95b8dec7d41317472b246c91c49f862eb795b6a9307f38ba6cacf3b91a4ecad45f482

  • SSDEEP

    1536:+KnJD/HBZbszKu9AZpy7r1jEwzGi1dDdDHgS:+KmzK4AZwHCi1dBA

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Hacked

C2

hakim32.ddns.net:2000

45.142.182.104:4568
Mutex

faec473824fc0bdcc025fb83aa3148f5

Attributes
  • reg_key

    faec473824fc0bdcc025fb83aa3148f5

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NotRat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections