Overview

overview

10

Static

static

10

f455e9cebe...2a.exe

windows7-x64

8

f455e9cebe...2a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f455e9cebe097d68dec0d3de79f26cd003d6acdf9ac78c369cd2cf537910872a.exe

  • Size

    93KB

  • MD5

    8460f9ad208bc215ca0f9a197d4164ed

  • SHA1

    e674ff30ff40eafb3e5bbb0801e83489aa7f83b4

  • SHA256

    f455e9cebe097d68dec0d3de79f26cd003d6acdf9ac78c369cd2cf537910872a

  • SHA512

    8b4e42f29008ee01891699721eb32127ee03296c0049eccd6a4cc6da470f9efffd2caec0fdf3e2eb317f1b1e2e9b908d8298453aaa51d01fa9185e7003098123

  • SSDEEP

    1536:iUrnEoSnsqS5ut/YMR8SjEwzGi1dDvDJgSU:iU3SnsqS5uVYM+7i1dHGV

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

127.0.0.1:4444
Mutex

e5bef73e53e8a9ca1ae2681b9a60d3a3

Attributes
  • reg_key

    e5bef73e53e8a9ca1ae2681b9a60d3a3

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f455e9cebe097d68dec0d3de79f26cd003d6acdf9ac78c369cd2cf537910872a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections