Overview

overview

10

Static

static

10

ftcracked/...24.exe

windows7-x64

10

ftcracked/...24.exe

windows10-2004-x64

8

ftcracked/models.dll

windows7-x64

1

ftcracked/models.dll

windows10-2004-x64

1

ftcracked/...nt.dll

windows7-x64

1

ftcracked/...nt.dll

windows10-2004-x64

1

ftcracked/visuals.dll

windows7-x64

1

ftcracked/visuals.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ftcracked.zip

  • Size

    11.3MB

  • MD5

    97e4f72d7ed421ceb8c7f2d376b26dcc

  • SHA1

    3e830ba2e71a08e3f2ec5f4492426e2e96177596

  • SHA256

    5a71796f27aa0e6275867bcfaaa08c199a7bb16457c1a7281486e419a94cd43a

  • SHA512

    6bbd1731614cf0fb24b48c0f8bd4227cd41b51a96c501355fdc972335d0db4166731de549e42cbe816bb509da860e39a898ba870619eea36c8c46778551ffe87

  • SSDEEP

    384:8C617CiM33jBVbJsy8PJ8bAoxPPvfQaUh0ErAF+rMRTyN/0L+EcoinblneHQM3eU:hNbJP8PJQAiHVUtrM+rMRa8NuIKt2J

Score
10/10
svhost.exenjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

svhost.exe

C2

5.39.43.50:5234

Mutex

ea0e047ed4e2ee535255119cbaabb438

Attributes
  • reg_key

    ea0e047ed4e2ee535255119cbaabb438

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ftcracked.zip
    .zip
  • ftcracked/FTcrack29.12.24.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ftcracked/models.dll
  • ftcracked/selectpoint.dll
  • ftcracked/visuals.dll