Overview

overview

10

Static

static

10

b48799d2ee...db.exe

windows7-x64

10

b48799d2ee...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b48799d2eee65351dde0cf00b8beb57ab15da799384c1b546c358f18d412a6db.exe

  • Size

    23KB

  • MD5

    71fcfb513538ed981068a2471ccdd94e

  • SHA1

    9c005883e25b4af9f7863d39acc06b94ac4b5342

  • SHA256

    b48799d2eee65351dde0cf00b8beb57ab15da799384c1b546c358f18d412a6db

  • SHA512

    0ba953e72d793ad15ae6f4fcb8a596624dc33cda12f3284b3f65b15186883bac78f84ce3714bf0936c5a6027bf08dfd5086443990bdeac7db8db1591e022a32a

  • SSDEEP

    384:6Gwz6+T4IjWZFNwXU0eiNUBdvt6lgT+lLOhXxQmRvR6JZlbw8hqIusZzZCRW:eTbC81NgRpcnufE

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

192.168.1.16:5552

Mutex

8325949a53507d629967d9d9b9741bc0

Attributes
  • reg_key

    8325949a53507d629967d9d9b9741bc0

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b48799d2eee65351dde0cf00b8beb57ab15da799384c1b546c358f18d412a6db.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections