Overview

overview

10

Static

static

10

svchost.exe

windows7-x64

10

svchost.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    37KB

  • MD5

    0a09aa08c401a1c24b8fb8535e16e25a

  • SHA1

    1fc2e9207b54d49c74e9fd3e833cd1dc088022d2

  • SHA256

    bf6a3c9e2fc15c686a58e2d146a7518e7484b51372dd432a5863bae057623330

  • SHA512

    4b4dddb99654be87304a1b1542098c82f95f3f8c35a1d1b19a8a014b29713fb37e87dabc5f24a53d10203b36bd4f9552e97f812951477975ae613d8ea6db1427

  • SSDEEP

    384:hSNBkiy5nDNGRn5IyUvgI1P9h4/C254crAF+rMRTyN/0L+EcoinblneHQM3epzXJ:4O5M5jUv11wq2+crM+rMRa8NuCbet

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Hacked

C2

wbouchraros.theworkpc.com:5552

Mutex

636e3f8f7cbfc871c59e6d158a287b2f

Attributes
  • reg_key

    636e3f8f7cbfc871c59e6d158a287b2f

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections