Overview

overview

10

Static

static

10

New Client.exe

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    New Client.exe

  • Size

    329KB

  • MD5

    fcf622c915f86ac6af7dca2002ecd5f4

  • SHA1

    6a50803bc1718d90333e319e22f265056fd0e095

  • SHA256

    a3e7e274a97d3f01b2427937ef71595d2cbdcccb5e7b538d2264e6db4b13c9ee

  • SHA512

    63bd10c6ce765623d1ddbbf9d9bcc20832772790f59224f3fb490b2386737b8482b615ad9e9d633ce84a1dc502ac101b03b733c78ff7ad92ac1454823501ecc4

  • SSDEEP

    3072:PzqKkC4BoN36t4QviFCooBnYfWl9z+aF9b6YvMoKpWACZ:PtE9ztvM/UZ

Score
10/10
usersnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

Users

C2

127.0.0.1:1488

Mutex

svchost.exe

Attributes
  • reg_key

    svchost.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86 arch:x86

    Password: qwertya2000

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections