Overview

overview

10

Static

static

10

Payload.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Payload.exe

  • Size

    55KB

  • MD5

    38d778214588a90479cbe41d5c45096a

  • SHA1

    0f3ba3e6c551f3c84c8bf246c249dbce5847e4c9

  • SHA256

    59eca347282944ed8b1a5b0212ca9ab1173a8d1a4ab1e7c2e00919e045ff2cd5

  • SHA512

    8e4241dd748acbf4b080d238b105f141d41aa31f352ddbd6eff021a5fe1cb4947c58a0c258f8191089cbf8774c0ad528cdf285187eb0cdf355e8ee599339f961

  • SSDEEP

    1536:V5ZMDnE4uNhty4XlSChDmwsNMDsXExI3pm8m:ZMDnlIk4XJhDmwsNMDsXExI3pm

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

<=- NjRAT 0.7d DeadSec Edition -=>

Botnet

Victim

Mutex

8fd1bff4586b01226706c450bba8bc5c

Attributes
  • reg_key

    8fd1bff4586b01226706c450bba8bc5c

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Payload.exe
    .exe windows:4 windows x86 arch:x86

    Password: ZxzxZXzxz

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections