Overview

overview

10

Static

static

10

bUmh.exe

windows7-x64

10

bUmh.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bUmh.exe

  • Size

    23KB

  • MD5

    e0fd55bba4b85fefccc50b5b648c8233

  • SHA1

    f5380fb50b77f641d21bf236f46e75bf87370111

  • SHA256

    ce385b77503279ba23996904ff4cf68febd2cca79e0dec8182fa116583e536d5

  • SHA512

    5f9d232155cf110b850903a2b09f546f7ce400ca28e277126751e443434e1b4a52efed385ea0ffdc0cf85d922068082054552d3d68b9de3fbe450b89ac2e1336

  • SSDEEP

    384:zYmdk8XvCJrQLdRGSiEYF7Y65gPyx6BDXNRmRvR6JZlbw8hqIusZzZlX:cwWkti/aeRpcnu2

Score
10/10
paulo2njrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

paulo2

C2

lafiro8872-20597.portmap.host:20597

Mutex

f10c8c215ff4ad451d811c8085a513f5

Attributes
  • reg_key

    f10c8c215ff4ad451d811c8085a513f5

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bUmh.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections