Overview

overview

10

Static

static

10

e10057cbc9...fc.exe

windows7-x64

1

e10057cbc9...fc.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    e10057cbc98b12819a4a3a41f68281398a3f18f0a411019e7f069b31a11395fc.exe

  • Size

    109KB

  • MD5

    01da9ea1cc55c02a1755b20a4ec69f05

  • SHA1

    1e2d88fc38f6afbde00ce873c2325c8d0c327879

  • SHA256

    e10057cbc98b12819a4a3a41f68281398a3f18f0a411019e7f069b31a11395fc

  • SHA512

    d005b838b5905ab8f10b7b6e581f976879d518a6c714722a64e0551b25b3a4793d8a696e8ffeb316e0893284886285a28007310c549b795e7bd9900c4439c05b

  • SSDEEP

    1536:LgxOx6baIa9RZj00ljEwzGi1dD8DlgSg2GCq2iW7z:LgxbaIa93jNSi1dCyMGCH

Score
10/10
lmaonjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Lmao

C2

hakim32.ddns.net:2000

127.0.0.1:5552
Mutex

496779573766ea94e8f182410716b25d

Attributes
  • reg_key

    496779573766ea94e8f182410716b25d

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e10057cbc98b12819a4a3a41f68281398a3f18f0a411019e7f069b31a11395fc.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections