Overview

overview

10

Static

static

10

6bdd45cc12...a8.exe

windows7-x64

10

6bdd45cc12...a8.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    6bdd45cc12be24d4b59d84925b035bac59bc1dcfc8aa17b28cf0018cd15443a8.exe

  • Size

    36KB

  • MD5

    f8bbb07b572b4f6764a920057f33a698

  • SHA1

    4617c211b0cf6066ec257319a96c7b06673bd624

  • SHA256

    6bdd45cc12be24d4b59d84925b035bac59bc1dcfc8aa17b28cf0018cd15443a8

  • SHA512

    93be8e73e5b702cd3ff2e7a8efd4168a8ea08fc3c43817566513ef98dfd2b2919eb5cecd55bce6ce0cf9bd90a87a56c02a1523dcc04f9fcc7e18094c75a46ce6

  • SSDEEP

    384:OtVMiLJBndznNCyMGmN4y3VncG6DSprAF+rMRTyN/0L+EcoinblneHQM3epzXvzi:U/RNRMGmNJJd6ErM+rMRa8NuFWt

Score
10/10
repoh2ckernjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

RepoH2cker

C2

147.185.221.21:3238

Mutex

b9ac204121aeb89afba5c1de324757b0

Attributes
  • reg_key

    b9ac204121aeb89afba5c1de324757b0

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6bdd45cc12be24d4b59d84925b035bac59bc1dcfc8aa17b28cf0018cd15443a8.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections