General

  • Target

    njrat.exe

  • Size

    93KB

  • MD5

    b2c01bc9146ffa5c8277f848fda29021

  • SHA1

    7803651574968662b7176a3d377e1a277caf2d2b

  • SHA256

    3e3a1507889ffccf2d5e5f2ce62e88958179a459ddfaf3947f57a70cbea8e390

  • SHA512

    82f5ee1bc548c52108a43b42f25cbc01d487768adc7e6a84f9a17e84ad45e8348d766c85c95e0fe8584e3ff73aa56604842ae4e3a7fbb66b6a163083f3243ebd

  • SSDEEP

    768:cY3/UGUiu5LVMZASgeArRKm6t0XJmmm6gaeG+KXxrjEtCdnl2pi1Rz4Rk3csGdp4:zUGputRe2Rx6koab9jEwzGi1dD0DOgS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

gg bro for pc ))

C2

FRANSESCOC50Y3AuZXUubmdyb2suaW8Strik:MTcxOTQ=

Mutex

5e98c3c6a2df3fbc3ab27687d36974a3

Attributes
  • reg_key

    5e98c3c6a2df3fbc3ab27687d36974a3

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • njrat.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections