General

  • Target

    8e027405c27400fc0c854b804f199eea27fcfe8a242bf3689658395d7530fe5a

  • Size

    55KB

  • MD5

    747d4dab0d5aab010616bc6271baccad

  • SHA1

    3d0f046911bf1a41542ba16e1313d3c50c4efe95

  • SHA256

    8e027405c27400fc0c854b804f199eea27fcfe8a242bf3689658395d7530fe5a

  • SHA512

    b0cfc5496f0c8c5c64527630f7220505b3bcb246c01731f89141b331abed573178730f013d4952a3cab491d7da9f3df75fe5e0a76197f5e3f5d9bfc9639de197

  • SSDEEP

    1536:HP0znRJqSbpiq0rq81/+YY1WyNo/8C3SX:szJbpiQ8dRYLY3C

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

iraqiiraqi.no-ip.biz:99

Mutex

5cd8f17f4086744065eb0992a09e05a2

Attributes
  • reg_key

    5cd8f17f4086744065eb0992a09e05a2

  • splitter

    |'|'|

Signatures

  • Njrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 8e027405c27400fc0c854b804f199eea27fcfe8a242bf3689658395d7530fe5a
    .rar
  • الادبي.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • العلمي.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • كل العراق.exe
    .exe windows x86


    Headers

    Sections