Overview

overview

10

Static

static

10

Plugincmd.exe

windows7-x64

10

Plugincmd.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Plugincmd.exe

  • Size

    145KB

  • MD5

    404d831747e7713f2ea6d859b52ce9b3

  • SHA1

    dc26d4095a0362960985e0fd4e96d12f0b3279e6

  • SHA256

    5ab75bde3a5b8fc855271e0d84b31deb5cea0c79bae87831b35a5fd0d0f30ea3

  • SHA512

    84c1d6725123b84996d951a9d777c1bc070d06f2b060c9adaf01443dedacb95adddc6afdc42049f72bea90d3290bd38241cefbb167268e41c68f30e622420968

  • SSDEEP

    3072:2HMO6QJ+yJAo/nJer3LaqVVVVVVVVVVVVVVVVVVVVVVVVVVl2wRp:PO6VknJerbF2

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

82.202.167.226:25563

Mutex

6223efa2e07c96185936fe49d82f6360

Attributes
  • reg_key

    6223efa2e07c96185936fe49d82f6360

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Plugincmd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections