Overview

overview

10

Static

static

10

2788-29-0x...ry.exe

windows7-x64

10

2788-29-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2788-29-0x00000000000F0000-0x0000000000466000-memory.dmp

  • Size

    3.5MB

  • MD5

    f41f059f4245ebc2caaa103103a4689a

  • SHA1

    c0b40d6520b58ce3e484d0f7c9ded7237c6fa059

  • SHA256

    2de37d5ef0c4b16a733af9802c00982fddb034f719b09c90140a7d65c7c97389

  • SHA512

    d0bd25c6558dec7ad6fc5ca4ed382fad82766db1551f654553c95b61fe57b228117bb818baf191256a49ed8e07b86247877ddaba86047091034e09b7c9ae0473

  • SSDEEP

    49152:/WwUXMaVn3pT4I/5xCiZ+fdSoR9tUwjenBaB94Pw:/7UX13+I7CYCeBaB9A

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

6.tcp.eu.ngrok.io:12482

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2788-29-0x00000000000F0000-0x0000000000466000-memory.dmp
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections