General

  • Target

    0c73944aea4a73904d40c015991b83cc.exe

  • Size

    93KB

  • MD5

    0c73944aea4a73904d40c015991b83cc

  • SHA1

    5cb8937b641433a53cc706ec4fa7ce9708abee7c

  • SHA256

    3d24da5c582ebfe07891b63d34c3274675bd65a995fc0506584d663961582b7c

  • SHA512

    f1a482d55a29f13bdf9425e8847269f8b1ae64cb8267dde8a5eac437658b17faccdb8b93f13715c7ec34368562ee49aa1843e3eb9f8ab3983fbdcae605729a0e

  • SSDEEP

    768:LY3z+RhWXxyFcxovUKUJuROprXtgN8eYhYbmXxrjEtCdnl2pi1Rz4Rk3esGdpqgM:2+/WhIUKcuOJXPhBjEwzGi1dD6DqgS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

FRANSESCOi50Y3Aubmdyb2suaW8Strik:MTcwMjE=

Mutex

3a2a689f56a3f6bab627ffc2efd3603c

Attributes
  • reg_key

    3a2a689f56a3f6bab627ffc2efd3603c

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c73944aea4a73904d40c015991b83cc.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections