Overview

overview

10

Static

static

10

Unconfirme...92.exe

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Unconfirmed 420792.crdownload

  • Size

    93KB

  • MD5

    b129339df82237d6c380a217deb9560e

  • SHA1

    493323fc6814a7ae53bb3cacacad45d03ee67533

  • SHA256

    4ea43058ef91685c3dd66816e8071ee17e975ac0428beac6ceac6040b71d82d5

  • SHA512

    c37a2600d3323bed642a093564de30b8bd23b725f48a969184a4bff41548939cdafbcff3f3bcd324b01e542195b6fea0953dd2bb95266e93569447a938bcb432

  • SSDEEP

    768:PY3Xx+EX74tXUIM5YT8/GED60m9ZX7jVXXtSNOXxrjEtCdnl2pi1Rz4Rk33sGdp1:Kx+o4dT8eOvm/5tFjEwzGi1dDDDFgS

Score
10/10
zezonjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

ZeZo

C2

hakim32.ddns.net:2000

127.0.0.1:5552
Mutex

cb09cde81178b9e6da8707007a21a865

Attributes
  • reg_key

    cb09cde81178b9e6da8707007a21a865

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Unconfirmed 420792.crdownload
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections