Overview

overview

10

Static

static

10

Payload.exe

windows7-x64

10

Payload.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Payload.exe

  • Size

    55KB

  • MD5

    83d3815a9a3fbd273f95e70db0eac3f8

  • SHA1

    99383ff04d57c81da8c8245c415ffbfdc990cbef

  • SHA256

    245f92a296c733453396b5c93aa899a2a5000a92ad740ba5de9fad644aacfd00

  • SHA512

    fba31ee3d823175f73d6271360af6b8ba962ae6749ad6871bcc2f4bd55a76cd48af0c86e7065ec0dfaa99a2fa445723ca1fcd2fe1a20a0130c8256e220e46353

  • SSDEEP

    1536:PtLu8DnN8N1+S1Cl/BODqwsNMDpXExI3pm8m:s8DnNGcXODqwsNMDpXExI3pm

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

tlkkyhm.localto.net:7075

Mutex

7dbcb400c9c5b846927c1bd3f91a691d

Attributes
  • reg_key

    7dbcb400c9c5b846927c1bd3f91a691d

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Payload.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections