Overview

overview

10

Static

static

10

fd584c51db...40.exe

windows7-x64

fd584c51db...40.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd584c51db69e857ee8ff982e5b5859fdcc2ed4a02a81ca193c5d55ec8bcd440

  • Size

    28KB

  • MD5

    555d779a59fa14c005c581c2e0593486

  • SHA1

    929ac6fbafa7a0b4b120b0dbf707bec487f8f907

  • SHA256

    fd584c51db69e857ee8ff982e5b5859fdcc2ed4a02a81ca193c5d55ec8bcd440

  • SHA512

    a2cda71bb3fea60c48bedb23623fcb537a7b5e7196f3a5ab83ecfb5cd1a65cf18334119a3ad25a65a4fc516bf7a631b0962ee54942720be5dedcb04cf65f952c

  • SSDEEP

    768:UKK7ZW4Oakw1BJX7oqsKuelBKh0p29SgRDe:tK78KEJKLKhG29jDe

Score
10/10
boomnjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Boom

C2

ahmadayad2014.no-ip.biz:1177

Mutex

d5a38e9b5f206c41f8851bf04a251d26

Attributes
  • reg_key

    d5a38e9b5f206c41f8851bf04a251d26

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd584c51db69e857ee8ff982e5b5859fdcc2ed4a02a81ca193c5d55ec8bcd440
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections