Overview

overview

10

Static

static

10

4a4dcb3d44...a3.exe

windows7-x64

10

4a4dcb3d44...a3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a4dcb3d44b25875a661b16ee7d351a057b43921277b1f44a6b17354bb6936a3.exe

  • Size

    89KB

  • MD5

    343079476b1636d4c4e56249f83f9187

  • SHA1

    d24fdb34ba242b7116f6a3e81501e99090f15c70

  • SHA256

    4a4dcb3d44b25875a661b16ee7d351a057b43921277b1f44a6b17354bb6936a3

  • SHA512

    ac5eb843ed6b06d1819d0d495ea2faeafda1456078c91b16f24aecc3f72718ebbf47687aaeabf1f7ef10b1a6b47a190e35b29d9bbe49d926ea1a3d2af09034c0

  • SSDEEP

    384:tsqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZBiS+8tj9:Wf65K2Yf1jKRpcnuXdEgTK

Score
10/10
low3nnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Low3n

C2

192.168.42.7:443

Mutex

1b08a9557635966a4afb29577a39bcd4

Attributes
  • reg_key

    1b08a9557635966a4afb29577a39bcd4

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a4dcb3d44b25875a661b16ee7d351a057b43921277b1f44a6b17354bb6936a3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections