Overview

overview

10

Static

static

10

c65ca4f6d2...89.exe

windows7-x64

10

c65ca4f6d2...89.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c65ca4f6d2c653e18e0d795ba0cb0c89.bin

  • Size

    65KB

  • MD5

    c65ca4f6d2c653e18e0d795ba0cb0c89

  • SHA1

    543c228d35fb48b5b147aa47cab2b76ef9e6c19b

  • SHA256

    d094b3e64b1ac779565c1819f7f1b4041b5fa901e74f0cad9d3d376c506635d9

  • SHA512

    b3e5b167372f41210c15f9907f4cbfdbb62cdec5b3334449b2e7d178b57a10f21cb189461080f1298d6bc9f7468acfab84dde6402184a8d5600458c2ac1a16e3

  • SSDEEP

    1536:jU+u2LoN36tcQviFw1A+HIBnvbwfLteF3nLrB9z3nUaF9bkS9vM:jU+uIoN36tcQviFC9oBn8fWl9zkaF9bU

Score
10/10
njratnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

njRat

C2

127.0.0.1:21679

Mutex

HDAudio.exe

Attributes
  • reg_key

    HDAudio.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c65ca4f6d2c653e18e0d795ba0cb0c89.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections