Overview

overview

10

Static

static

10

New Client.exe

windows7-x64

10

New Client.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    New Client.exe

  • Size

    65KB

  • MD5

    887a8615fbf00c99ad3bba678a12054e

  • SHA1

    7f28591ba02e772f43c0a836f762632b4975fd51

  • SHA256

    e7ecafbaf22c7b4fce4c49075f60ab7571b6c82c48df7ca1bd390e7d8fac4cf6

  • SHA512

    ce7ca8270528b80285da7210e5d6c427429b303bf0cd78f7192015ae6c509eed5954a7a9b0a5e5b870081610f691343f721f008d342ad8c0faa1f6d29f60ab59

  • SSDEEP

    1536:7PqKkTm4BoN36t4QviFw1UjLkBnvnTfLteF3nLrB9z3nFaF9byS9vM:7PqKkC4BoN36t4QviFCooBnrfWl9zVaa

Score
10/10
usersnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

Users

C2

127.0.0.1:1337

Mutex

svchost.exe

Attributes
  • reg_key

    svchost.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections