Overview

overview

10

Static

static

10

New Client.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    New Client.exe

  • Size

    329KB

  • MD5

    5bc5b33e561da7b4041d56ed0b6ac2f6

  • SHA1

    10fd1ddcca2fbca3fab4ee07af8f27d60cd1cf74

  • SHA256

    fc4b6cde8abf8173fde74d01a0612e77cda5153e4596ff56d57c915958164886

  • SHA512

    7de0435a476e2aaf7d7449927cc627936f5e8e28fd6dacf773d7abd96eed996ef49eaf3d541321b1c33577513ad79061060069a02ec585289e80eb5e3a4d6062

  • SSDEEP

    3072:AzqKkC4BoN36t4QviFCooBn/fWl9zlaF9biYvMoKpWACZ:Atn9zwvM/UZ

Score
10/10
usersnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

Users

C2

127.0.0.1:1337

Mutex

svchost.exe

Attributes
  • reg_key

    svchost.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86 arch:x86

    Password: sfdSAVG

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections