Overview

overview

10

Static

static

10

52Sankt-petirburg.exe

windows7-x64

10

52Sankt-petirburg.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    52Sankt-petirburg.exe

  • Size

    37KB

  • MD5

    f86c9cf2beaacca514d4325d864465ae

  • SHA1

    eedbca9c86b56ef90d5ab8d1c2b590cc49bdc6f1

  • SHA256

    692fac8c4526402b8ad51e4136cdf521a40ce6131d6448d41f52bbff6cbb915f

  • SHA512

    ae5fe4c20ab34862554b8ad5c9782715c10db44aa0eb70371a0b6e59c3ab288994b5a62ad148741241ba723eceb86705dc90fef423ebfc93309bca3b49eb2bef

  • SSDEEP

    768:4brZsKADtOHiR4akrGQi1t2hrM+rMRa8Nur2t:4brYtVSCQi1wS+gRJNs

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

2.tcp.eu.ngrok.io:11520

Mutex

8ead822573ce5fb537bcc66be7911c46

Attributes
  • reg_key

    8ead822573ce5fb537bcc66be7911c46

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 52Sankt-petirburg.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections