Overview

overview

10

Static

static

10

123.exe

windows7-x64

10

123.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    123.exe

  • Size

    93KB

  • MD5

    b4378a070bfed34faa41bcafe7a876b7

  • SHA1

    4129b0e4742f0713d8e264f34272dcd2e560305e

  • SHA256

    585137c99c22cd0b08e725b6f995a85a233ae31b118e30486bfbf2bb98d39a0e

  • SHA512

    e33547a869ba9aea236ed664bf1f69d75e9c260c9392deb413dd6137703358f5f633286e443d5ab8c1fb8286cc3003f17fdad7c0a1939ba93d415d731ff76b1a

  • SSDEEP

    1536:wdwC+xhUa9urgOBPRNvM4jEwzGi1dDlDMgS:wdmUa9urgObdGi1dZl

Score
10/10
fuckednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

fucked

C2

hakim32.ddns.net:2000

fat-pads.gl.at.ply.gg:35059
Mutex

1ded3b4c35b07f633f7f88a8380c030d

Attributes
  • reg_key

    1ded3b4c35b07f633f7f88a8380c030d

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 123.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections