Overview

overview

10

Static

static

10

1qwss.exe

windows7-x64

8

1qwss.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1qwss.exe

  • Size

    37KB

  • MD5

    7ba0e5137bfa7ff37035b9d64087f1d3

  • SHA1

    301a5a8ca0507f7cbd32f67e5669dbf7862cc7a4

  • SHA256

    2ad4531950ae5d29c411ca5cfa092b36eb5cfee82695a08e984b2a5379d57fec

  • SHA512

    6aaf22c7c86ae93a7e73387180dbc68a5acf55c5bd1504afc41ac93e996f20c1e47370b0d16471359d429d28f0baddb02c599c31a8260ad9794d459320895be6

  • SSDEEP

    768:LQkki91twjrlSheFCLIrM+rMRa8Nu4pt:LQkki91Ojwhe0LT+gRJNj

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

demo-device-4-mysql-instance.at.remote.it:33000

Mutex

824e0118aba537332d4fbdef02bdd499

Attributes
  • reg_key

    824e0118aba537332d4fbdef02bdd499

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1qwss.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections