Overview

overview

10

Static

static

10

Server.exe

windows7-x64

8

Server.exe

windows10-2004-x64

8

Server.exe

android-9-x86

Server.exe

android-10-x64

Server.exe

android-11-x64

Server.exe

macos-10.15-amd64

Server.exe

ubuntu-18.04-amd64

Server.exe

debian-9-armhf

Server.exe

debian-9-mips

Server.exe

debian-9-mipsel

Resubmissions

12-01-2025 12:25

250112-pl1c6svkfj 10

11-01-2025 18:40

250111-xa6d2swkhs 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Server.exe

  • Size

    37KB

  • MD5

    9c4756c64c1766f12170521fef786ec3

  • SHA1

    38b1263c929b1801dce4b2dd41b03375f1a3ab5e

  • SHA256

    33cbeb7e1cbd6b8a131403a0008af4295f78c9a8ee4dccc8e2b2923ebd70b0c6

  • SHA512

    dba2a630552b46f1df0552c525ee0ce351c805cf275b8921669d0c8f4ac35c998c9bddf4e88f014fe8fe34f95dd2aae14165f110166258aa7b39ed81b5a0452a

  • SSDEEP

    384:qnxqiU754NLHdayszjzc/j9s2UBmrAF+rMRTyN/0L+EcoinblneHQM3epzX9NrnZ:2ZZdJszjzch1UUrM+rMRa8Nub9t

Score
10/10
testnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Test

C2

foshigh-22602.portmap.host:22602

Mutex

7a8e3dbbded41bf7b8dd4ab3840130ea

Attributes
  • reg_key

    7a8e3dbbded41bf7b8dd4ab3840130ea

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections