Overview

overview

10

Static

static

10

winX32.exe

windows7-x64

10

winX32.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    winX32.exe

  • Size

    27KB

  • MD5

    eee37f6f66eafa13d9555dfc9ccb3805

  • SHA1

    c9b2dd6b4bd464cb767b5ff1260dc07e223cd0b8

  • SHA256

    ca569ad2e113c57c5ddeb1770ae4d63f579df3504306097ff8a16b1cb37dcaa9

  • SHA512

    9bf9709f3a1dcdf97d7c88e133702f0c46756125b65adc7b6b3d61ed7b624aa5212729f7fe95c35ef1d457175c3613b4deaf625268c9651e8bdd57201c379218

  • SSDEEP

    384:fL1M2XwBNOaLNOFE/Av2yeCP1BBvMl7AQk93vmhm7UMKmIEecKdbXTzm9bVhcaM4:Te220M0Wl7A/vMHTi9bD

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

sosomyhestor.ddns.net:443

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • winX32.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections