Overview

overview

10

Static

static

10

svchost.exe

windows7-x64

8

svchost.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    29KB

  • MD5

    876efe6368af95f55720c1f6ca571821

  • SHA1

    e41680090e7a5936e08c353e10d11e13e0a8117f

  • SHA256

    ba5ed0e293d0ea36c31f0a7e2aa9e5921e6db7a6b147773c2a13d19fe9b7841d

  • SHA512

    b2f2301ff6331c4a0cd4e6913d1a4bf165b10ada5c37544efea8df154ebdff8b1dcffaeb1f081e4ef26dcae33b507c10ce0eeb8f78200a19d4b88f05f787408f

  • SSDEEP

    384:ChkrLGN8fNl7L5H4yAyr9n95/K4ZoumqDYcqeYtGBsbh0w4wlAokw9OhgOL1vYRc:h7R4yAy944Aq1qe5BKh0p29SgRgR

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

192.168.1.25:1604

Mutex

ba4c12bee3027d94da5c81db2d196bfd

Attributes
  • reg_key

    ba4c12bee3027d94da5c81db2d196bfd

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections