Overview

overview

10

Static

static

10

4f79a433f3...cs.exe

windows7-x64

10

4f79a433f3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f79a433f368517a92af8b6db5a8fb673a382a0605b81b74eee91b535282dcda_NeikiAnalytics.exe

  • Size

    31KB

  • MD5

    625f37a6b1a9346a72157727e9ecb680

  • SHA1

    f1da0966107802cdb22385c9f6c4719d8448df24

  • SHA256

    4f79a433f368517a92af8b6db5a8fb673a382a0605b81b74eee91b535282dcda

  • SHA512

    24e4e558e57fbc31bf0e37cc447482ce47db552df2cf9b1b135ba12e2e1eef3fd25c1b6df127aca643acaf3b6f16a98fd2514e6ef7bdf3109aff0796ed921457

  • SSDEEP

    768:mXJEpBZhjzOzx5+R4s/Hu56HdAbiTinvaTQmIDUu0tiQfHj:dD6uukAbiT6oQVkBj

Score
10/10
mybotnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

192.168.48.128:5552

Mutex

c0990138054db81699cc939e4ca680a2

Attributes
  • reg_key

    c0990138054db81699cc939e4ca680a2

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f79a433f368517a92af8b6db5a8fb673a382a0605b81b74eee91b535282dcda_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections