Overview

overview

10

Static

static

10

rat.exe

windows7-x64

rat.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rat.exe

  • Size

    37KB

  • MD5

    b6ac6372481d7c6f1bc451a24908c027

  • SHA1

    916ba233aa63496f3c1e4b2de1f659eaf464d1fb

  • SHA256

    49eda64e4c43aad7dbabc071fbc465e4fadbacc2047b3816b61eb2f9d4c4d2a9

  • SHA512

    8f595465a6d836a61bc68c4cd2e2944249d8da44a359357e831cc7629d405d9672463e38bdc391561f3088b60241b4e00284e7375705ce60aa5e6e9daa7f2ac7

  • SSDEEP

    384:+6QCT0i9XdTe/kCOyU7H4fVADXCSUrAF+rMRTyN/0L+EcoinblneHQM3epzX5Nr3:TVd1CFU7H4SjCvrM+rMRa8NubTt

Score
10/10
svchostnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

svchost

C2

127.0.0.1:37383

Mutex

5f0edea008a4109415956e9eb957dc99

Attributes
  • reg_key

    5f0edea008a4109415956e9eb957dc99

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections