Overview

overview

10

Static

static

10

2884-23-0x...ry.exe

windows7-x64

2884-23-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2884-23-0x0000000000400000-0x000000000040C000-memory.dmp

  • Size

    48KB

  • MD5

    7397305cbd9697404035348469061cbc

  • SHA1

    c14bbf1e11b88155cd969cb7c89d60f8bb0233a1

  • SHA256

    110b91b999dc3f20939c49626e35adeda86e22ecb8d44c5cbc0d1faf5adaeb50

  • SHA512

    30c0b9fb9a6ae4d95daa25202ac8e15b6cc7ae24d23850f658874bfc46a2d38ffe6f4559999cf18bc361d7469362f16e83232dcdd4fd51db724a5402f608287b

  • SSDEEP

    384:8c6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZzI:Ye9EJLN/yRpcnuj

Score
10/10
neufnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

neuf

C2

doddyfire.linkpc.net:10000

Mutex

e1a87040f2026369a233f9ae76301b7b

Attributes
  • reg_key

    e1a87040f2026369a233f9ae76301b7b

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2884-23-0x0000000000400000-0x000000000040C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections