Overview

overview

10

Static

static

10

d13cec4552...6d.exe

windows7-x64

10

d13cec4552...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d13cec4552da53d8f26b8acbafbd444402977178ed28be49ed4ca393abbce26d.exe

  • Size

    23KB

  • MD5

    0819e8e98a229f0da3db76eaa17f1cae

  • SHA1

    09fe0c5cee8970d1804b5ae5ec3cf0b49e432baa

  • SHA256

    d13cec4552da53d8f26b8acbafbd444402977178ed28be49ed4ca393abbce26d

  • SHA512

    401f62824f1bfa8b0b8d26678f6d5be4b95c19c0494beb55ec3079d15f86bb1892d18aff6a9d565dac7eb3c81c1c72ab1a208ec685ff89d3b2018cec5ec7ec78

  • SSDEEP

    384:PluBPiZCMfdfSJrQbsLRGSIxYVL46pg/i8BD9BmRvR6JZlbw8hqIusZzZ9XIL:4OmhtIiRpcnu1L

Score
10/10
lammernjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Lammer

C2

ie-serving.gl.at.ply.gg:18976

Mutex

d386661cfe8f30c3a692533641b57806

Attributes
  • reg_key

    d386661cfe8f30c3a692533641b57806

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d13cec4552da53d8f26b8acbafbd444402977178ed28be49ed4ca393abbce26d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections