Overview

overview

10

Static

static

10

68021ca272...67.exe

windows7-x64

10

68021ca272...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68021ca2722cb5eadaed2cd5b9c46903d01077dad0ebafdcef2de6d9e0664d67.exe

  • Size

    23KB

  • MD5

    3da0670c583abb45648e3f0c6ab5089e

  • SHA1

    5ac7e03ff02e77a5dcb094165759ad8fcec72b88

  • SHA256

    68021ca2722cb5eadaed2cd5b9c46903d01077dad0ebafdcef2de6d9e0664d67

  • SHA512

    f8f3bce1abdf8d52d9264f143f62283153f7caf4d25948b7098082adff1fb007fd3444c77c18db66edb71dc6a2433296e91dd73c4ea01ef14a700937f0d3dbf9

  • SSDEEP

    384:dY324bcgPiJLQrfARGSRUJsbY6ZgvSMBD3t8mRvR6JZlbw8hqIusZzZsq9+:SL2s+tRyRpcnuTP

Score
10/10
lammernjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Lammer

C2

troia23.duckdns.org:1177

Mutex

bcb4c719d2ef301534574d61226c5663

Attributes
  • reg_key

    bcb4c719d2ef301534574d61226c5663

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 68021ca2722cb5eadaed2cd5b9c46903d01077dad0ebafdcef2de6d9e0664d67.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections