Overview

overview

10

Static

static

10

6ca6cd9958...cs.exe

windows7-x64

10

6ca6cd9958...cs.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ca6cd995878c87c9b6b3965b05fc0321bf72567692095b30db8d4a6aa29c969_NeikiAnalytics.exe

  • Size

    37KB

  • MD5

    dc40033ac0dfc21398bd3fb160b875a0

  • SHA1

    18e21b0e02e23bddd3ca73f5ba8cac27772caac1

  • SHA256

    6ca6cd995878c87c9b6b3965b05fc0321bf72567692095b30db8d4a6aa29c969

  • SHA512

    aacb54eecd25dda1d5708863e908c672d6d15f8b2bac702a130ab768928c7010e006130ffcf426f8328ccc4d0a4c28ce73f51e6dfeb5b9f703888349611f1a42

  • SSDEEP

    384:6nabo7gibtjpPu7w9qyMTKBn9csWiXNbrAF+rMRTyN/0L+EcoinblneHQM3epzXS:nsNN9ZMTKBG9ixrM+rMRa8Nuevt

Score
10/10
cryptednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

crypted

C2

photos-money.gl.at.ply.gg:48615

Mutex

35a1f679fedf9b35d5eea5163994e8c0

Attributes
  • reg_key

    35a1f679fedf9b35d5eea5163994e8c0

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ca6cd995878c87c9b6b3965b05fc0321bf72567692095b30db8d4a6aa29c969_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections