Overview

overview

10

Static

static

10

private1.exe

windows7-x64

8

private1.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    private1.rar

  • Size

    16KB

  • MD5

    d361d80c0772dfa50d31bedb7585f98d

  • SHA1

    f404fbbafc75bc6f233f13955939853864f0da05

  • SHA256

    28472daaf17796bf3578a08211d74c246ad23b8fc3aeee6f2bf97793eed6424c

  • SHA512

    0e607b657678f487b41238768d560add2bde3e17ec6a7a4849a523bcb4a3a97f792f80f2052d8e311732deaa580340e34a5cbe4c9c156def93bc66c615df4793

  • SSDEEP

    384:tU6Z9b5M15nHt6LEotk51Q2se9AlwmF293wj1XzkqJ+Kwd:tj99MTwLLkEe9CM3wj1XhQK6

Score
10/10
sysyem32njrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

sysyem32

C2

95.182.14.203:7777

Mutex

983d369cb23bd8bc71a9b6f7dca85165

Attributes
  • reg_key

    983d369cb23bd8bc71a9b6f7dca85165

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • private1.rar
    .rar
  • private1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections