Overview

overview

10

Static

static

10

842733f885...db.exe

windows7-x64

842733f885...db.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    842733f8854c3f874416871894d18d7f238ec9c6bca265a2b0102376d8abf4db

  • Size

    28KB

  • MD5

    2bed8b0795921840a6b8f7f66416eee8

  • SHA1

    9735fcf6f698b410cc5200dee2b4b678c8d03a95

  • SHA256

    842733f8854c3f874416871894d18d7f238ec9c6bca265a2b0102376d8abf4db

  • SHA512

    43149c0e3790a54f60bea4af2dbc2d3205c6d595ebdecfef007e71509388bb97cbaa0343f8ba812861bf71dc5bf79d8f37e1738c2f6c24c0b9add4a3701772be

  • SSDEEP

    768:UKK7ZW4Oakw1BJX7oqsKuelBKh0p29SgRDe:tK78KEJKLKhG29jDe

Score
10/10
boomnjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Boom

C2

ahmadayad2014.no-ip.biz:1177

Mutex

d5a38e9b5f206c41f8851bf04a251d26

Attributes
  • reg_key

    d5a38e9b5f206c41f8851bf04a251d26

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 842733f8854c3f874416871894d18d7f238ec9c6bca265a2b0102376d8abf4db
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections