General
-
Target
c3e38846a535460fe6adcba1f616d475.exe
-
Size
43KB
-
MD5
c3e38846a535460fe6adcba1f616d475
-
SHA1
2d36c53827221c232c52cc191f570e8ec0b47bb4
-
SHA256
c8c8dd7f532aa2589d548cd1567e7bc3d62e873a64150c988afbb8eb7b033f47
-
SHA512
07f6614151e0eb009d527f1da111524cad0dd5d6b65beb79a289463a95e6bd947159b6ec90100641cd7bd36d6b97b6f7b37169014d2a3b18300ec60f8121a8a6
-
SSDEEP
384:+ZytdiFIB+oyiXD9KEEMKya/IutK9D9O5UE5QzwBlpJNakkjh/TzF7pWnr/greTr:Ex+IliT9DaxvQO+Wl+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
4.tcp.eu.ngrok.io:15450
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c3e38846a535460fe6adcba1f616d475.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections