Overview

overview

10

Static

static

10

9afb798850...f6.exe

windows7-x64

10

9afb798850...f6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9afb798850a3e6a18a58ee03649cfc63b020502585f27cede5b75754546cabf6

  • Size

    31KB

  • MD5

    f3f0ccda18da89e09238baac20aebfe8

  • SHA1

    be11f524fc269e7f54b699aaaeb98ddbeac0dfc6

  • SHA256

    9afb798850a3e6a18a58ee03649cfc63b020502585f27cede5b75754546cabf6

  • SHA512

    639ae3316eb8570f8b67039f7cd4a22811e53b0fbc6599bc98cc1bdbc6202c099ac0ab246a1931699b3f14143293696d338f12643839c05802f3cee0e51fa525

  • SSDEEP

    768:2hSp69DdxkzxP6bo8SG3FQNv6zQmIDUu0tiMZj:fqq27icQVkVj

Score
10/10
junjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

ju

C2

200.163.3.57:6522

Mutex

8a61be64e8caaec4b1b2f68f47e67a8f

Attributes
  • reg_key

    8a61be64e8caaec4b1b2f68f47e67a8f

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9afb798850a3e6a18a58ee03649cfc63b020502585f27cede5b75754546cabf6
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections