Overview

overview

10

Static

static

10

52.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52.exe

  • Size

    71KB

  • MD5

    e26b3b024819700a921a740c183e8a56

  • SHA1

    cd00c8a74001bbbc6f73cc3a7186a0f9a4b87269

  • SHA256

    881e24b6b76ee059f9c6014daa91180cd1b7a7ab9708dbfe08ae6adf7094df98

  • SHA512

    6b7e58febaf029f7834bda01c17296a4b6c005fd5231609299764fc029f9d0379a211bad4cf568529a9d9b22f48bb4d602e932707f6034dd902b5d698b96d8a1

  • SSDEEP

    1536:IeFWP8F/VSYodSnqMlUzrZf2F0iZuM9SIftUEhT04GNrztiBVXiKMt9PMrYaF9bp:phN0rJIfbT04xX/q9PnaF9b1

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

Victim

C2

http://pastebin.com/raw/V0VwSRaW:88

Mutex

svchost.exe

Attributes
  • reg_key

    svchost.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 52.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections