General
-
Target
9d1e50cbef2a51e3ca0aa6504d7b8739bb431b1e7c1dce0db2f58ae9b277d591
-
Size
37KB
-
MD5
ce203795f25fd0d42f9b4ca91fc89877
-
SHA1
f55e210e54736eaa1e15a5764504fd1b6705968b
-
SHA256
9d1e50cbef2a51e3ca0aa6504d7b8739bb431b1e7c1dce0db2f58ae9b277d591
-
SHA512
6e069770dfb2e77b35b8594c6fe11ad1066ce232cc52d54892f1417b003e9a2424e51fed7ab42f1bfddc99791c6620f85fd1414d9efc21ae825ca36b2a9999f4
-
SSDEEP
384:NyW6WIiejtCVLO309Qmykrt4QdqMjf+vWEWxrAF+rMRTyN/0L+EcoinblneHQM3S:zHdGdkrOGb+eE2rM+rMRa8Nuagt
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
Kontol
C2
45.32.108.159:5552
Mutex
1da3b8905e6c54c724d1c70a5cf05f16
Attributes
-
reg_key
1da3b8905e6c54c724d1c70a5cf05f16
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9d1e50cbef2a51e3ca0aa6504d7b8739bb431b1e7c1dce0db2f58ae9b277d591
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections