Overview

overview

10

Static

static

10

NEXOOSINTOOLS.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEXOOSINTOOLS.exe

  • Size

    93KB

  • MD5

    4afc93095dbd77f67a487017c31e841e

  • SHA1

    e4ca564e05ba034bccb82684b10a6980a64069c4

  • SHA256

    717587a4fe24f60b031e559acf6c02c95e88b744dfa433e2d881244e5e645112

  • SHA512

    31230588861cd30e2f4a098c120a16db832a0411259366d2d8756dc32d6a12724fae22430aceaf6ad3c4a5f78add1a85a67d639c9085cf01fc7da70e19549431

  • SSDEEP

    1536:hVeYW6qbkW8aVpO1NRkoojEwzGi1dDmD5gS:hVG8aVpO3SCi1dA2

Score
10/10
whyyourunlmaonjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

WHYYOURUNLMAO

C2

hakim32.ddns.net:2000

wasted9sss1-57718.portmap.host:8080
Mutex

ffabd658b0037df03ea8ab88e357d2f4

Attributes
  • reg_key

    ffabd658b0037df03ea8ab88e357d2f4

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEXOOSINTOOLS.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections