Overview

overview

10

Static

static

10

c8d8f79ad3...ea.exe

windows7-x64

10

c8d8f79ad3...ea.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8d8f79ad37249faa03dae92947af35d310fffc28b7597507246d1f8c8eb9fea.exe

  • Size

    43KB

  • MD5

    587ad6e22bb4925dd74971fb811742d2

  • SHA1

    ed232dd2da4676de64df99bdf43d86b5049b65f2

  • SHA256

    c8d8f79ad37249faa03dae92947af35d310fffc28b7597507246d1f8c8eb9fea

  • SHA512

    552bba329873ed49765327677731fd2f99107cc2837748011dfcc792b5e9158c4c248c08d2ef6f1e70a11616d6684df4fa0068a32853a7b8eb1bd1077d56e57e

  • SSDEEP

    384:dZyBcUdsbhKIyKPDbSYeE6rrez8Iij+ZsNO3PlpJKkkjh/TzF7pWn/dwgreT0pqP:XeRiwFKrbvUsuXQ/o40+L

Score
10/10
34234234njrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

34234234

C2

146.158.107.225:8408

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c8d8f79ad37249faa03dae92947af35d310fffc28b7597507246d1f8c8eb9fea.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections