Overview

overview

10

Static

static

10

Payload.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Payload.exe

  • Size

    71KB

  • MD5

    112ce9e770c7245e9b37f52c0ef34563

  • SHA1

    a5a7dedbc4aacf24398231da2cdbe0325f4ed869

  • SHA256

    a5b394f5780d1c2f5c006d482a2016de8000fbd334f925cdeb349ea0f863018e

  • SHA512

    c3b5a32beaaae9bf044ee6a7552cf2a765b1efb0d7688c367d486e1b341564b8b940628b726115631c0e81d26c08995893176e78c1a68a1282a4c9c70849dba3

  • SSDEEP

    1536:EeFWPsHAE8oFS3q6bUZf5f2F0iZOa9sIftOShT04GNrztiBVXiKMt9PMrPaF9baf:Bs6fFIfHT04xX/q9P8aF9ba

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

Victim

C2

http://burhanalassad.site/KING:963

Mutex

svchost.exe

Attributes
  • reg_key

    svchost.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Payload.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections