Overview

overview

10

Static

static

10

1.exe

windows10-2004-x64

8

2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Desktop.rar

  • Size

    32KB

  • MD5

    fa74acf4fccc82452b85a3a30f42e5fa

  • SHA1

    8f8c8bde12d198014f8f9dd9707ecd5e4247be83

  • SHA256

    6977bf2c439cf1b242f161a6ed881e630a43cc52079a41cb17daa52af0906460

  • SHA512

    7eb78967e23e59cc3ffc40079966160a301c4f899154d45ac72db1ccab9e84028d791e4492db87e4e57cf2a8f374aa5f10354427de594d356d21a59ded27d93b

  • SSDEEP

    768:RbCH9lunhJhsmA5wOns35OM2/M0ty0Ox9Giy:5CzchJ7A+r35OMCM0t7Ox9w

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

ksmj.ddns.net:1493

211.178.25.134:1493
Mutex

3ad1e9739c9a4090463fd61e32132dc1

Attributes
  • reg_key

    3ad1e9739c9a4090463fd61e32132dc1

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Desktop.rar
    .rar

    Password: 123

  • 1.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 2.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections