Overview

overview

10

Static

static

10

6e3f2ebb56...b2.exe

windows7-x64

10

6e3f2ebb56...b2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e3f2ebb560fede5fca72650a4f495d1038930a3a7c0bebbd032be0a79e1f2b2.exe

  • Size

    22KB

  • MD5

    14cf4f2623f9c31a8ad03945e848a60c

  • SHA1

    677c414db6441270a8ed824a8a27259ff2720758

  • SHA256

    6e3f2ebb560fede5fca72650a4f495d1038930a3a7c0bebbd032be0a79e1f2b2

  • SHA512

    e43c6095290b28e22a655c2c223811d8b46fc75428db5c52a3f896e52ef795ce2267a6c92dfad753aef6cb47740de721ba41713b7533fd59c9a7b29f0aeb3c83

  • SSDEEP

    384:2+n2650N3qZbATcjRGC5Eo9D46BgnqUhay1ZmRvR6JZlbw8hqIusZzZRv:pm+71d5XRpcnui

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

shytanoff.ddns.net:1177

Mutex

3d0dd0f92b252ee0856a5ed12374a126

Attributes
  • reg_key

    3d0dd0f92b252ee0856a5ed12374a126

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6e3f2ebb560fede5fca72650a4f495d1038930a3a7c0bebbd032be0a79e1f2b2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections