Overview

overview

10

Static

static

10

4a7199a48c...1e.exe

windows7-x64

8

4a7199a48c...1e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a7199a48c0f1084d37b2b8a8d68d9f1c29c3fd142b29ddd8e96eed0f681061e

  • Size

    29KB

  • MD5

    60dfdf92121ca4adcd41e95549665034

  • SHA1

    c5a91a51356f9806eae6055d6507c61d74d3ec01

  • SHA256

    4a7199a48c0f1084d37b2b8a8d68d9f1c29c3fd142b29ddd8e96eed0f681061e

  • SHA512

    da9ca7c87f3db1b6996afcc944be1dee3f96bb22c2b72deb6d7f9dc44161e3ed7ac740f60f3d43c7094ec5a730279c7cdff4b1b2145384337c1172c5f3aa1680

  • SSDEEP

    768:d7LeNXwlhgDZKUHZadCE8qlmeXBKh0p29SgRLK:d7Ly705KhG29jLK

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

aa371e8ed3703d97ee84a5cd74e544a3

Attributes
  • reg_key

    aa371e8ed3703d97ee84a5cd74e544a3

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a7199a48c0f1084d37b2b8a8d68d9f1c29c3fd142b29ddd8e96eed0f681061e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections