Overview

overview

10

Static

static

10

fbfea1db44...d8.exe

windows7-x64

10

fbfea1db44...d8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbfea1db4497202597c91cfda1d44136e85ca74fbf780baab2f1b1520c724cd8.exe

  • Size

    23KB

  • MD5

    3ff1c9a4374b6796cdd642efab97169f

  • SHA1

    8a7f3f69324b3dceb8e1aecae2dbf6fbe9f65693

  • SHA256

    fbfea1db4497202597c91cfda1d44136e85ca74fbf780baab2f1b1520c724cd8

  • SHA512

    804aa71e6b883973e7978e39d2724784c978ab1c1ec741fa2544968273cabd771907321f5918408880a0f15b38f1db9080889f27d6830c0853da8b5098654874

  • SSDEEP

    384:iluBPiZCMfdfSJrQbsLRGSIxYVL46pg/i8BD9BmRvR6JZlbw8hqIusZzZqZY:1OmhtIiRpcnulY

Score
10/10
내따꽈리njrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

내따꽈리

C2

asdgdcvxzcv.kro.kr:2222

Mutex

651deda00b27ab86d974483926aa2300

Attributes
  • reg_key

    651deda00b27ab86d974483926aa2300

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fbfea1db4497202597c91cfda1d44136e85ca74fbf780baab2f1b1520c724cd8.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections