Overview

overview

10

Static

static

10

ab2e7c9ffb...1a.exe

windows7-x64

10

ab2e7c9ffb...1a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab2e7c9ffb00cef1b2398b6f1fea8c5186c0081dc5961d0b3bdb86a362b7a01a

  • Size

    37KB

  • MD5

    da64a67b27cc65b1ae460886e99a9bef

  • SHA1

    f30cea6ecea072bdabc4ab37b0a0fc97a8979e1b

  • SHA256

    ab2e7c9ffb00cef1b2398b6f1fea8c5186c0081dc5961d0b3bdb86a362b7a01a

  • SHA512

    cfd4b158e2038c1ea12e2ac15fb17015f3828c438dab6182682bf00d13cefb7f703674dc41d4de879dd1d61fcf550450f9d2ded04d1b541fa79c33603349ad87

  • SSDEEP

    384:QJSFqiUF54NLHdayszHdiPZDs2+LprAF+rMRTyN/0L+EcoinblneHQM3epzX7Nr0:jPZdJszHdiRV+trM+rMRa8NuZCt

Score
10/10
svchost.exenjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

svchost.exe

C2

system-spam.gl.at.ply.gg:15770

Mutex

cc5185c296ed8e9b9bde0eb3c22305b1

Attributes
  • reg_key

    cc5185c296ed8e9b9bde0eb3c22305b1

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab2e7c9ffb00cef1b2398b6f1fea8c5186c0081dc5961d0b3bdb86a362b7a01a
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections