Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    turu.exe

  • Size

    65KB

  • MD5

    c6cbe0c2fef6507a9a7f828a4a59cfb6

  • SHA1

    1e7030c9bce0bb2c720980d6c62272149d1f040e

  • SHA256

    0174841d3dc6ff63135c23732a8dd375e4c86b8025050b47b515a92373ec445a

  • SHA512

    b98cd97426866fe9fe81c5792273a0de200fa543b4a6768d08293f31be1478bfdc76c3beec05c35d7022cb2cf03f6e8dcd9d18f52842cf9fd68678958bd0e253

  • SSDEEP

    1536:QXkoUoN36tSQviFw1Kn7uBnvbLfLteF3nLrB9z3nJaF9bYS9vM:QXkoUoN36tSQviFCyqBnHfWl9z5aF9b

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:42900

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • turu.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections