Overview

overview

10

Static

static

10

New Client.exe

windows10-2004-x64

New Client.exe

windows7-x64

10

New Client.exe

windows10-2004-x64

10

New Client.exe

windows10-ltsc 2021-x64

10

New Client.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New Client.exe

  • Size

    65KB

  • MD5

    8cf4617583acf1f05c867d91dfa88e29

  • SHA1

    5fdf26cbad2eb6d466bc04199b42b2d40df3159c

  • SHA256

    a257729469dd5a70d282e08c5bd87e6e55540e37728368204218745840ffe76e

  • SHA512

    1d0513b1a2a81edb244c1d14ab3ec58ca168be562964251b32857a117b66c9fa4de075ee5bbb1f87caf4175c0c9e2414ffe6548aa22354ed2f5c9b480395add6

  • SSDEEP

    1536:wfqK4Tm4BoN36t4QviFw1AjHkBnvbKfLteF3nLrB9z3nIaF9brS9vM:wfqK4C4BoN36t4QviFC8EBnefWl9zYaH

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:36811

Mutex

svhost.exe

Attributes
  • reg_key

    svhost.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections