Overview

overview

10

Static

static

10

914a949a33...11.exe

windows7-x64

8

914a949a33...11.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    914a949a33300cf474bf600123172bdcc38be01861e305cbfd92352c3d658111.exe

  • Size

    93KB

  • MD5

    07d2b2f855c04980460a79e46403a9e6

  • SHA1

    769c70d095b661397fddd8409258d09f1a6ecb22

  • SHA256

    914a949a33300cf474bf600123172bdcc38be01861e305cbfd92352c3d658111

  • SHA512

    b6f44fe7bd37fca48754d98008a52cdf9ebaa0e9579da6d4e5fab9e7f36d699d23f57c750dcacb333d083ae0b989cfc4c7f56234c5d816a10f27a899c7402808

  • SSDEEP

    768:cY3psTnkpjTMpALPGMtsas88EtNXhU9Y1mxCXxrjEtCdnl2pi1Rz4Rk39sGdpPgM:Vs7kVbPGHz88Eb71pjEwzGi1dDNDPgS

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

4.tcp.eu.ngrok.io:14314
Mutex

5be0476e945484022883b165a4b0fda0

Attributes
  • reg_key

    5be0476e945484022883b165a4b0fda0

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 914a949a33300cf474bf600123172bdcc38be01861e305cbfd92352c3d658111.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections