General

  • Target

    2222222222222222222.exe

  • Size

    69KB

  • MD5

    f2d4c74d4d1fc97fcc8cfe02ca2dd1eb

  • SHA1

    8213a0fd44d330837631cd7df12235871cda4e34

  • SHA256

    68bb309a02780e53b94f36eb0d9b1a03a69eede3b16deabbe0deb2ce83abe5bb

  • SHA512

    0e523eb6cefbb1a73f223e7df9e01ca7f921a763a7d595482ab7b18414429a780b9f0a646aa7d30aed34225a65bca1cc1038c1caf45343870f3811e7cf3e96d8

  • SSDEEP

    1536:/XKgWTpYH+C8tIiZtrBLTvAs2bvA3teOWTkuLPZ9b3mVcxug0ZdRaEX1iNyaF9b5:/XKgWTpYH+C8t5zlLT92bvcwkWR9b1ue

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:31440

Mutex

win64.exe

Attributes
  • reg_key

    win64.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2222222222222222222.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections