Overview

overview

10

Static

static

10

4969eeef83...ef.exe

windows7-x64

10

4969eeef83...ef.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4969eeef83f251d6cd382e0b0043c54a5ac4c6549e157c22b4ec39d84fa073ef.exe

  • Size

    71KB

  • MD5

    5dc0b2da12223f5be3fb564e161060f4

  • SHA1

    aa443ec1dea46af1501cdfa28d848170919fd6e7

  • SHA256

    4969eeef83f251d6cd382e0b0043c54a5ac4c6549e157c22b4ec39d84fa073ef

  • SHA512

    cbff6f1ae1e397890b0889863729ee6190db6f3b4a0cc0112c2adf50856cc3d56567b48ca4c39d5f6b26f6642a686bfad47f05eeb05034ccfd742ff2527813de

  • SSDEEP

    1536:KFBwImo1lyoWSlqejUiX5f2F0iZ+J9QLXHQ/HVM4brcJtiBfKMt9PMlAaF9bC15:zTOXWLX2VM4iq9PhaF9bC3

Score
10/10
victimnjrat

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

Victim

C2

kgbhostpro.duckdns.org:963

Mutex

svchost.exe

Attributes
  • reg_key

    svchost.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4969eeef83f251d6cd382e0b0043c54a5ac4c6549e157c22b4ec39d84fa073ef.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections