Overview

overview

10

Static

static

10

Lammer.exe

windows11-21h2-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Lammer.exe

  • Size

    23KB

  • MD5

    57d52e1b44c96f301043976953c88a76

  • SHA1

    0fe526ee33fa4db72cd2c4b177c4aaf1f3b0cb45

  • SHA256

    0562122ca4ad3bf393d111cc8e2408a7c374b10ff09d9cc7f40933770b408f21

  • SHA512

    7f55725d76af38eff42e79360b274fbfd2c274765c2113163a45327cc06480939a77c98c199c91914ceee1022dacabc1009cfe401ca16aba46d6ed7754aa47fc

  • SSDEEP

    384:bYmdk8XvCJrQLdRGSiEYF7Y65gPyx6BDXNRmRvR6JZlbw8hqIusZzZso:kwWkti/aeRpcnuG

Score
10/10
lammernjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Lammer

C2

station-gps.gl.at.ply.gg:26933

Mutex

6fe32c3cda07f1e8b91e22a447ac35bd

Attributes
  • reg_key

    6fe32c3cda07f1e8b91e22a447ac35bd

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Lammer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections