Overview

overview

10

Static

static

10

e2bf3d37dd...9N.exe

windows7-x64

10

e2bf3d37dd...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2bf3d37ddf4f4db311467cbeaab0e7b1c217e53fa313861b987da2402542df9N

  • Size

    43KB

  • MD5

    b5fbad1ebd0c1f721b6bedaad5aed9f0

  • SHA1

    a55cecffa5d90aeb5938e81b22c6ce68797f41ab

  • SHA256

    e2bf3d37ddf4f4db311467cbeaab0e7b1c217e53fa313861b987da2402542df9

  • SHA512

    1d73ba203ff123f9284d6cbe6ba0184c3af05f8018be6d8d1ec3de7fc52dd5e0f12e97fa5a9ad6a83a23828429331de95728dec208651d3f860744343fb16855

  • SSDEEP

    384:WZy+x7q1STss7yKStZ9gQ8ExUZS2azsIij+ZsNO3PlpJKkkjh/TzF7pWn5TgreTf:MZGk4smKS39xNU0zuXQ/o8D+L

Score
10/10
colara 2.9njrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

colara 2.9

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e2bf3d37ddf4f4db311467cbeaab0e7b1c217e53fa313861b987da2402542df9N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections