Overview

overview

10

Static

static

10

bce165d33e...0e.exe

windows7-x64

8

bce165d33e...0e.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    320003e6e4ffaf6abfec240b66d847dd.bin

  • Size

    34KB

  • MD5

    2429812bcf641920a9766dd2502d30ea

  • SHA1

    91a83e4b21091b0ea2391405583384f408e89a6a

  • SHA256

    b627ec0423ab775b691814e0aad159fd6fab65f207b7b0e55b47e9f093b02de8

  • SHA512

    b605aba0310b2872c2c10ecffdfa47e1468b7ea259fed7f249b9865e898f7d5e858db364156c77a0fae99f9ef371064fee53446e73d1ab2f2932752931276206

  • SSDEEP

    768:d1ZAsBIo8SVhtHi7PXZ99BA+I48Y1qQ5UFrVHNs67AQw:lAs3bVHC7PXZ9k+I48YUHts67AQw

Score
10/10
servernjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Server

C2

hakim32.ddns.net:2000

0.tcp.jp.ngrok.io:12215
Mutex

66273c90ad6767c59de1f960bb1ab11c

Attributes
  • reg_key

    66273c90ad6767c59de1f960bb1ab11c

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 320003e6e4ffaf6abfec240b66d847dd.bin
    .zip

    Password: infected

  • bce165d33e357b11e80d957e6bfb4e03eda91beec78dac5bd13a6ef8af108c0e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections