Overview

overview

10

Static

static

10

a689b16dd9...60.exe

windows7-x64

10

a689b16dd9...60.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e07420af030f60aaa585125ee30d12f.bin

  • Size

    34KB

  • MD5

    3c6e8c6be9634ee830dc41c7347852f0

  • SHA1

    168d5f7bc989b4719bbe826eadf7ba3bbf42b9a0

  • SHA256

    231d793e556dfd3232cc5c7261124a6ff484056c6e12f87cee6f7f40f6c5a9d6

  • SHA512

    c01732e79619bf7efd6cf907c102e52a31eb6762cf6b3d2cf814cc10048479b2a35321acbd73a09c495c4199251e08eb4256bbf0b36c47bd8eda2db62dffc559

  • SSDEEP

    768:UUj0CuKqRg66uJmATFURxwLdC4YPn4AiT6kjpnVPXCI2cl6q39:soA5UD4aviOkD2cQ2

Score
10/10
mybotnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBoT

C2

hakim32.ddns.net:2000

0.tcp.eu.ngrok.io:15683
Mutex

1a38da36594cb56d811034357f167e9d

Attributes
  • reg_key

    1a38da36594cb56d811034357f167e9d

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e07420af030f60aaa585125ee30d12f.bin
    .zip

    Password: infected

  • a689b16dd9bfa6277ec62d9d0767b91326b3912066934a95c95f0a4ed0f57960.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections