Overview

overview

10

Static

static

10

b27c09b124...fN.exe

windows7-x64

10

b27c09b124...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b27c09b124308ccac9fe09314acccce3832e80c3a08ce067b0bc798609ea367fN

  • Size

    23KB

  • MD5

    4078c5e6d1a746f0659b54fae5745510

  • SHA1

    2468153b9107b6b8fa1a077f6d30082e66084b4a

  • SHA256

    b27c09b124308ccac9fe09314acccce3832e80c3a08ce067b0bc798609ea367f

  • SHA512

    467b12d5f42dc2bbc5bd46b590c85bbab18cb1a75d97e0991352d4e17199ade8372c694d83135cee927f4addb967e2ee96d5df233b6e04567a218d426b0bf41b

  • SSDEEP

    384:sPQeCo2zmZbQHkJeCdUwBvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZ7I:sQ5yBVd7Rpcnu/

Score
10/10
usernjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

user

C2

windowssistem.duckdns.org:5020

Mutex

cff070eafb77e420cce40ff9e3f8a491

Attributes
  • reg_key

    cff070eafb77e420cce40ff9e3f8a491

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b27c09b124308ccac9fe09314acccce3832e80c3a08ce067b0bc798609ea367fN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections