Overview

overview

10

Static

static

10

8e02ebc246...17.exe

windows7-x64

8

8e02ebc246...17.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e02ebc246d1c26c5c5df05e93c8eede2b735846e464a8c2929bef2c6e4dd517.exe

  • Size

    60KB

  • MD5

    5d7c454d1dac18cbf17c19640a3e636a

  • SHA1

    549e69fa3137f77e179835e1b28df75b4a9054ec

  • SHA256

    8e02ebc246d1c26c5c5df05e93c8eede2b735846e464a8c2929bef2c6e4dd517

  • SHA512

    c6a6a40d9b9790789f4589cb169d0758309e8067d1f1fce83c9f65656dd85f4ba5dd359141831a80a1f316c724031387e1ca5beb31899135a18962c0eea8673b

  • SSDEEP

    1536:f8VkLWnLAvsB+ztBat+EQUr2f1KVT95xl:f8VkLWnLAvsE/O46T9V

Score
10/10
hacked njrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

192.168.1.16:4444

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e02ebc246d1c26c5c5df05e93c8eede2b735846e464a8c2929bef2c6e4dd517.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections