Overview

overview

10

Static

static

10

80b7e96fc2...ca.exe

windows7-x64

10

80b7e96fc2...ca.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20be24c90426c82034fafecbf1c96147.bin

  • Size

    17KB

  • MD5

    64506852f91e56b21960f4e6c33b09bc

  • SHA1

    ed6a038983de8ca52362b7dbe6ee46cb99c2f0b7

  • SHA256

    05800bdef0d7b8f44dc75059371f671307e96b3442739c0b13f528d4ae7e08d2

  • SHA512

    6091adf68448c956ecd12b9bc5aef8538a6462640d79d0443059b69fa622feeabc7308334d77567126fdea1e5560692db2edc0c55112b2367ae1947aaa654798

  • SSDEEP

    384:TuX2+F805B1eaOkRjGwQK1FCyL1dGvUZbm2Pao5t/C:TJYIFKGWGiyoTC

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:10942

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20be24c90426c82034fafecbf1c96147.bin
    .zip

    Password: infected

  • 80b7e96fc227f23824e4e964d2eedfb030fb4ca43e356d5602a8f65e838488ca.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections