Overview

overview

10

Static

static

10

aa9e75e91b...54.exe

windows7-x64

10

aa9e75e91b...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa9e75e91b3ac6ad8868e9906beccf54.exe

  • Size

    543KB

  • MD5

    aa9e75e91b3ac6ad8868e9906beccf54

  • SHA1

    29d755c2aae31a9f1f743538ca268c51687ce8e8

  • SHA256

    fddd2c104500971da3ec56f930dcd53da181c0c45e47f5a25a57028afb642e29

  • SHA512

    5b64b516484cee819c8602a233f7be77904a725ed9a7a91dcd54b5aa1bc0d9a8ff4489798b87388c7a2c2216c5ef70bdcd337b9384fb66abe38bea2b0f346163

  • SSDEEP

    12288:GVRmalyw9qfcaF52WgAIsAxOfqV42Rqol0M0pMsRNQSJGmENwMp3:ARigAm3lTaK

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

Victim

C2

167.71.14.135:963

Mutex

svchost.exe

Attributes
  • reg_key

    svchost.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa9e75e91b3ac6ad8868e9906beccf54.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections