General

  • Target

    a2d69ed72366b178a80d9158c3c9fe31.exe

  • Size

    26KB

  • MD5

    a2d69ed72366b178a80d9158c3c9fe31

  • SHA1

    20c9bc770b32a47724bad6d30f87aad05f804d8e

  • SHA256

    f35de16742223478ecb0f8d241c1442168a7b593a0c0af572981b832ed9b21e3

  • SHA512

    9f42030eea2e9b4a599c97da42341bfcc317d6d4303c115fb541f61a7c71b3c1624efcce3bf82a03e7bd5d1cb751b5808558a25efcac80e5f2b045fa411e240c

  • SSDEEP

    384:nLzWGJyOwKUY0KBCoR7FdvPRt+hMhAQk93vmhm7UMKmIEecKdbXTzm9bVhcaJ4J1:Lix50xhA/vMHTi9bD

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

CatTroll

C2

minimum-certainly.at.ply.gg:26058

Mutex

DiscordPresence

Attributes
  • reg_key

    DiscordPresence

  • splitter

    |-F-|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a2d69ed72366b178a80d9158c3c9fe31.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections