Overview

overview

10

Static

static

10

1729c5b2ca...14.exe

windows7-x64

8

1729c5b2ca...14.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1729c5b2ca53abe5d0e67535766860ebba91dc23b8575ac5b6fc8ca33167de14.exe

  • Size

    93KB

  • MD5

    1b4192a3f7d586fbe102ff76e5f6c760

  • SHA1

    a5d4e3292e5072152764ac603fbb8411fed810eb

  • SHA256

    1729c5b2ca53abe5d0e67535766860ebba91dc23b8575ac5b6fc8ca33167de14

  • SHA512

    89d437dd7e51701d1107ec381ee6f89238459580596800e92291da6d7bd8caf1f6431c53d31968696035a479e7814d8171ee4c3ca8834854afed914ec3fdf593

  • SSDEEP

    1536:dU/r7EkrjaFIs7E5Ox8Jn8LjEwzGi1dDyD4gS:dU7jau5OKVni1d0h

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

144.202.69.96:22021
Mutex

0a454ceb29e4709267ac1207a45d0b0d

Attributes
  • reg_key

    0a454ceb29e4709267ac1207a45d0b0d

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1729c5b2ca53abe5d0e67535766860ebba91dc23b8575ac5b6fc8ca33167de14.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections