Overview

overview

10

Static

static

10

celex.exe

windows7-x64

10

celex.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    celex.exe

  • Size

    55KB

  • MD5

    12b85b6e730f6f4a92e2b10056269197

  • SHA1

    f642ac330be5fe04bc21cd4a98e77e9d017f97c6

  • SHA256

    c16c299ce7b493462cd973c199d2fec2544800711ba0b42cf47f84374d6e71d7

  • SHA512

    ab7bac1c0603ece5339baccd8566a2151ec488e820f6f0a119a9882a92f27f9a6844d6273ad27026b869363a9366531d0f4e7677461538cd350e1111e15c5081

  • SSDEEP

    1536:sjYADn8fLN2/SbxRDD3wsNMD7XExI3pmSm:RADnccqbTDD3wsNMD7XExI3pm

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

cities-constraints.gl.at.ply.gg:16265

Mutex

02c50d9a6cd2748a3e6820b9ed4d22d1

Attributes
  • reg_key

    02c50d9a6cd2748a3e6820b9ed4d22d1

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • celex.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections