Overview

overview

10

Static

static

10

1676-27-0x...ry.exe

windows7-x64

1676-27-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1676-27-0x0000000000090000-0x000000000009C000-memory.dmp

  • Size

    48KB

  • MD5

    bb63bab4b365dbb6cc99ca8be12c4d2c

  • SHA1

    b94452f38afe37cd590728e846a4cf5b74452d59

  • SHA256

    330b844ac9ab87404c5c9d4348fd649f0ad2c9ae8a496b737920c90eb49e1d7e

  • SHA512

    9d1bf04e8ffaf4648ae0a184fea5a0910b0e9cf97e2d5ca6a821b3b3f8d19c2bf5a63cb014759d4b04a2b9464d4dea7f3c68305dfed417c16a5bec49934fc043

  • SSDEEP

    384:iQ+ILgIbOprgPsUOSU0kB1kd6dg7GYh/JomRvR6JZlbw8hqIusZzZy0:9LL6MVU0NRpcnu4

Score
10/10
jjjnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

jjj

C2

youri.mooo.com:1605

Mutex

e936a10f968ac948cd351c9629dbd36d

Attributes
  • reg_key

    e936a10f968ac948cd351c9629dbd36d

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1676-27-0x0000000000090000-0x000000000009C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections