Overview

overview

10

Static

static

10

831391429d...70.exe

windows7-x64

10

831391429d...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    831391429d50f54bdad48209d87e7370.exe

  • Size

    43KB

  • MD5

    831391429d50f54bdad48209d87e7370

  • SHA1

    8feb1f6f7df7863eb6aa711d952f4ac85f2d97f3

  • SHA256

    1cd657fbab02d949326cc0d174b2d3909fa32cd4c53592ae530ff33379528498

  • SHA512

    d19fc494de57e02f18162d7056cb93b7431dff4315d1300e9d1b6e9b95a8fa0d96a378a6896d1f0d604e17c4b55b3f72c90781d9bc1482e649d4c7d4fcc63dbc

  • SSDEEP

    384:1ZyZcg98NaIyrtdd32E68ETiE7QzsIij+ZsNO3PlpJKkkjh/TzF7pWnYmgreT0pO:f4ywFrLd32HfquXQ/oRC+L

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

4.tcp.eu.ngrok.io:16948

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 831391429d50f54bdad48209d87e7370.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections