Overview

overview

10

Static

static

10

feqww.exe

windows7-x64

10

feqww.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    feqww.exe

  • Size

    55KB

  • MD5

    316157aa7a41bffb0bf75f88e436abe3

  • SHA1

    f2f2bb14e22d3c711272c62f01d17ae24085e41e

  • SHA256

    a401daf688acacc2c2b1967c8773728e1c15dfc391e2242e38223f43000beea7

  • SHA512

    95f630a070948a4f403523c44c1a85253efb1c34cde3499d601beec98e4987d845e8d80b79065563b0ec52d76a64b31f2e5c7ee72aea11df5fac43e5058f8690

  • SSDEEP

    1536:KWDM8Dn+QNoB4vZ9Vk7dwmuXKDCwsNMDGXExI3pmUm:FI8Dn+nWTVk7umuXKDCwsNMDGXExI3pm

Score
10/10
f9t familynjrat

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

F9t family

C2

pics-accessory.gl.at.ply.gg:16815

Mutex

3135d21b63440eb82b132374252e9d92

Attributes
  • reg_key

    3135d21b63440eb82b132374252e9d92

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • feqww.exe
    .exe windows:4 windows x86 arch:x86

    Password: dfv

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections