Overview

overview

10

Static

static

10

55f14ddb9c...3b.exe

windows7-x64

10

55f14ddb9c...3b.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55f14ddb9cb98c506b5667dc899e713b.exe

  • Size

    43KB

  • MD5

    55f14ddb9cb98c506b5667dc899e713b

  • SHA1

    9580c4f224b159b31f1f9700290e58de8c96cf2c

  • SHA256

    651dd96a90091b85c380db91123753a1a1bfb4182519bdf4d8ee4f387a900e16

  • SHA512

    afc552b89480c976cf4d756c66786e174aa3536918ae4c25a509592664f7d72675292c620a4b15e35172d987730e22cc264eb7d3ac9d3509f624aaf0c6ed4c37

  • SSDEEP

    384:hZyBiNUst+3gUy6Z9ZkIaMcrtJiK9D9O5UE5QzwBlpJNakkjh/TzF7pWnD7greTD:zbwQh6fZ1OrivQO+yp+L

Score
10/10
loxnjrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

lox

C2

80.253.239.170:31089

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 55f14ddb9cb98c506b5667dc899e713b.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections