Overview

overview

10

Static

static

10

svchost.exe

windows7-x64

10

svchost.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    55KB

  • MD5

    78c1efa671ef2f9693b51ecab8c52e43

  • SHA1

    6462ca58a83a16e2b5b73209351a6ee8a6b73a26

  • SHA256

    ee6ad42af69b3e096b327d4718489ee28f80f68dc5d8d88c457f81bc78b1d77b

  • SHA512

    d6e3327cea8b7340e3cc8390d74dc6af0d59d6b5a8caf730046542839320bd3785a830d25ae16f9ce70c4d077be71b4232aa43813cfa69616f96d114a7ea01aa

  • SSDEEP

    1536:HOXADnDUNEN1nSM6AD0wsNMD0RXExI3pmzm:OADnDRSRAD0wsNMDSXExI3pm

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

rating-fits.gl.at.ply.gg:1094

Mutex

9386777fa0c55d638f7867508c149f22

Attributes
  • reg_key

    9386777fa0c55d638f7867508c149f22

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections