General

  • Target

    4b4e6ce587df768d5f3530aa8c2a3a75.exe

  • Size

    324KB

  • MD5

    4b4e6ce587df768d5f3530aa8c2a3a75

  • SHA1

    87169151f1c6b437966e5c54a683b3675d41af95

  • SHA256

    dece4adf99e29edff4ef336fe6f7c40ffb90abd46514985ef86ef7c4fe5e94ed

  • SHA512

    c060f9ce6594cfdd8043c16839bd6db65841b32288cffcec7fe21897611be76e0ae529d4668762478841d91ca6d4f74bbfbe109bb01ea3cfaaaeace1f47373db

  • SSDEEP

    1536:KJdsLi7tBnI6eLK1hyuBaIeigUr2f1KVF9PlR:KJdsLi7tBnIf21hyOt46F9dR

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:7776

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |'|'|

Signatures

Files

  • 4b4e6ce587df768d5f3530aa8c2a3a75.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections