Overview

overview

10

Static

static

10

06c3f944b7...69.exe

windows7-x64

10

06c3f944b7...69.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06c3f944b727c87972f9d56fea68a60f1af29b0e0c22277b5e41b99c8de09b69

  • Size

    556KB

  • MD5

    1dc99b41c1208984206d0772b185f048

  • SHA1

    de93c338c7e8972c06f8baa85b7f32280590b40f

  • SHA256

    06c3f944b727c87972f9d56fea68a60f1af29b0e0c22277b5e41b99c8de09b69

  • SHA512

    daac4683972ae6e2e2b1dbc491d91161ae01e03a159448cd06e61ddaa1a2fa11220b5e45f7bea3cdbe2ec85bb688c953c62618aba84ef16412f2acd2e2f27502

  • SSDEEP

    6144:LT8x80a46mjAEaJ/aMQvFYZ0V5UWHiOBoqEBBHIcagKWsdLe3ZWKrvpNX3EsLK1Y:s5a46mjFcQ00HFCkKBcLemsLK1QJ4e

Score
10/10
steamnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

steam

C2

193.186.4.155:5136

Mutex

765ae8a70251ab6ea2a97fb80e3cfb11

Attributes
  • reg_key

    765ae8a70251ab6ea2a97fb80e3cfb11

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 06c3f944b727c87972f9d56fea68a60f1af29b0e0c22277b5e41b99c8de09b69
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections