Overview

overview

10

Static

static

10

pweijn8t8c.exe

windows7-x64

10

pweijn8t8c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pweijn8t8c.exe

  • Size

    31KB

  • MD5

    d16886dc04d9ce85c604088c886b8fd5

  • SHA1

    49653245efb1cfe5eee9b3452bb83c6718ba5c2f

  • SHA256

    d422eaabc8ad234cbfe79ef20dbbd6386fa5a367c9da869a33cac7379830a6d7

  • SHA512

    b1bfa78a37e9e8a957c8ff4203f607e952dfa46e0ff3d22706e0d3d44c10f60a2f24f73559d63c5ad919b06b71920b79f8c6b4fad92d57ff8e49c9732f2f82fc

  • SSDEEP

    768:njMXjwpJbb2zxxO56eqvPisfv8yQmIDUu0tiWmj:ikKdisvQVkQj

Score
10/10
upssnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

upss

C2

4.tcp.eu.ngrok.io:17748

Mutex

406e946763c60aa214f9df290a7f9ffa

Attributes
  • reg_key

    406e946763c60aa214f9df290a7f9ffa

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • pweijn8t8c.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections