Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Zed.exe

  • Size

    55KB

  • MD5

    88766f0cb8317d52b74abce65ee8e678

  • SHA1

    627bbe21e1c2466f41c7e56abd091f97da883996

  • SHA256

    1238b4229a0064c4cfb1cb81f5f188aaa98ec389618b4e66a2d8e778fd1ad46e

  • SHA512

    24f237e8406bea03bd5c628201aa6c566b555284d1a53e70a578e24a0e3a1fc4333931bb63a349f6af33b72c6d85d13b930a3bf9ce27bdac4f5ad9626a4b159b

  • SSDEEP

    1536:SUCoDns0NiiSx1YDOwsNMD9XExI3pmUm:CoDnwXTYDOwsNMD9XExI3pm

Score
10/10
lolnjrat

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

LOL

C2

0.tcp.eu.ngrok.io:10132

Mutex

ca708b969e8a267561c58f8952ce2f15

Attributes
  • reg_key

    ca708b969e8a267561c58f8952ce2f15

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Zed.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections