Overview

overview

10

Static

static

10

Nursultan.exe

windows7-x64

8

Nursultan.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Nursultan.exe

  • Size

    37KB

  • MD5

    2b9ba0ecff278cc5451395be5bf17b09

  • SHA1

    fdef1d08bf7356c2c667c5feffe06374279594c7

  • SHA256

    2d5aad2052c8e0b63ffc71df3c212e193f278fe755b6e6a176c6691b45d262b6

  • SHA512

    c19518019b1e5c62f41b2139eacbc9d9de592d58d0d4c1dbf804e0945dcda0eed21c10a1679897420f852f647c3ed4bf17476aed0a0095eeb963dacaf2f5b846

  • SSDEEP

    384:KqN+aw7BeAaXaEiVjzdmB0O4yUv16xgp+Z2fv5Yh/AkCwUrAF+rMRTyN/0L+EcoD:HEaw7FPOTUv1R4/CdrM+rMRa8NuiZt

Score
10/10
svchostnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

svchost

C2

127.0.0.1:5565

Mutex

db911832d8fe1307ede48ad62c86c687

Attributes
  • reg_key

    db911832d8fe1307ede48ad62c86c687

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections