Overview

overview

10

Static

static

10

eb39aa174e...9e.exe

windows7-x64

10

eb39aa174e...9e.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb39aa174e5a1bead3c5c6d6003022cdbc309d09820024b7cde7afc1347e7b9e.exe

  • Size

    78KB

  • MD5

    b317cc9e529037f915cebbb81e4ee742

  • SHA1

    41970486b3d3c06734b7ab9f9c6b452e2ce50c60

  • SHA256

    eb39aa174e5a1bead3c5c6d6003022cdbc309d09820024b7cde7afc1347e7b9e

  • SHA512

    b0e93264692345d20c9c3a08335e10af1dc4cdd5cede0fd62d587cb18f71393437121702f96e85f028c26b4c5c1ab38eb412e575c5264779f09d74b0f25dd21b

  • SSDEEP

    1536:RpN+BUqqDpQS5wpOk3JCK6pFNlfq6fOpd/9nEh9TGUQ6R:OQwpOk5CK6dO/9ESUQ6

Score
10/10
limenjrat

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Lime

C2

195.222.172.238:5228

Mutex

svchost.exe

Attributes
  • reg_key

    svchost.exe

  • splitter

    njrat

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb39aa174e5a1bead3c5c6d6003022cdbc309d09820024b7cde7afc1347e7b9e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections