Overview

overview

10

Static

static

10

svchost.exe

windows7-x64

10

svchost.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    55KB

  • MD5

    680f739bf42f4216e71ff11a93dbc442

  • SHA1

    18657dd539b962f5fd8e1a57f3d1cad723cd5751

  • SHA256

    65cee8298f3498ca798a6d215c29d8df75b3bb3b5485dc7db065275cbdfe6899

  • SHA512

    7f3b111e6f1117cf9869809911c492e5a240a1128334c4c6b2f4a36cc9d09918fd5cdca7190c0364a0c382b0e4920047a6b0b638707f6287398591ee2cd0ad7b

  • SSDEEP

    1536:K0N8sDnKNQpynzKSDLwsNMDjXExI3pmym:2sDnloneSDLwsNMDjXExI3pm

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

rating-fits.gl.at.ply.gg:29634

Mutex

baea523642b0eecb3605f4fcf0e321da

Attributes
  • reg_key

    baea523642b0eecb3605f4fcf0e321da

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections