General
-
Target
SheetRat.exe
-
Size
43KB
-
MD5
e724518038d47f4c75a39b9a60432486
-
SHA1
b11242dd4c25a63510d4f4763a70a7e6a4721a00
-
SHA256
cc34ed7fe4d050280a93551e8538646f72db21bb75ee9853a4e285df624c41df
-
SHA512
e543147486a1e67fa9bd50bba194574c1fcfc9adf66d96c1ce397bb6db649dfd4c0d1bd7075000f5e36e78b4c6999da2647fdf798b3df6b240c16a1d66fd1670
-
SSDEEP
384:4Zy0XZdlYxOsykvofRwaSTEKRfIizgIij+ZsNO3PlpJKkkjh/TzF7pWnkY1greTn:O3XHuIpi4RpSBR1uXQ/o2t+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
????? ????
C2
president-dans.gl.at.ply.gg:20494
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
SheetRat.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections