Overview

overview

10

Static

static

10

0d06324d56...50.exe

windows7-x64

1

0d06324d56...50.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d06324d56334dbf8a1d3076f76c7acd7cbad1dfbb446f743357597c8df49550

  • Size

    23KB

  • MD5

    56676236306c32b0383ea4662d1d4b9f

  • SHA1

    a78ec3ca7af409c4be0a167a0d2b54fbbd742d26

  • SHA256

    0d06324d56334dbf8a1d3076f76c7acd7cbad1dfbb446f743357597c8df49550

  • SHA512

    7742ed92faa7a6fccdab9510b25c0dfbeac468f2bfb9ecc7430d3193730c2e7928f7e77d162b80e272135e6228f08f59526d8e54296ee841b5486d86b9f55b43

  • SSDEEP

    384:GweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZrnhAn:RLq411eRpcnu06n

Score
10/10
fourth#4njrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

fourth#4

C2

soft98.linkpc.net:5550

Mutex

10e93180d6481ad63a77c2b255d40864

Attributes
  • reg_key

    10e93180d6481ad63a77c2b255d40864

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d06324d56334dbf8a1d3076f76c7acd7cbad1dfbb446f743357597c8df49550
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections