Overview

overview

10

Static

static

10

svshot.exe

windows7-x64

8

svshot.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    svshot.exe

  • Size

    29KB

  • MD5

    503aa30c53450332e79f096e1cf6980c

  • SHA1

    2b4ac769eb7543e3186194e7c8472bb66f532e94

  • SHA256

    b3020ae97e15657d6b6a1b0b9751b955694cc7a7928c7d109a55d14b3fc0d0a3

  • SHA512

    774c240a452c1ec39a5022288e9800f6fd1f38ab399cf06b133059d9069afb14e07c2f094c432707ed3125108aea5307c3d70c3c84f5149076e9c09b481ac15f

  • SSDEEP

    384:O9QXpl7dzns8oDw/LRP55/4GWmqDSeXegLGBsbh0w4wlAokw9OhgOL1vYRGOZz1c:OI7Js8oDSJz4wqZXenBKh0p29SgRX+

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

donti-frix.no-ip.biz:81

Mutex

8708e7d3a3ad6421b5e061196492ffc5

Attributes
  • reg_key

    8708e7d3a3ad6421b5e061196492ffc5

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svshot.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections