General
-
Target
Payload.exe
-
Size
27KB
-
MD5
9005619d418478002b174e71ec8c5d91
-
SHA1
3de0f5d8233fa600f47a21ddc80ec6da46dee8f9
-
SHA256
7a59d8a5718b10f01cb62c80e7b926ee5446b58e3ad2d30661fc397ba7820e17
-
SHA512
f8240601319e88433c3b97572827fdda17a54c7e707e1abb02f13c23ce68bc292a4cf642cbbd4e59ca29617f574ec81d2252aed17f995962d2903a08e480a2a9
-
SSDEEP
384:aLB2ZoTmgEJLbwvqWGbPxZh7M9AQk93vmhm7UMKmIEecKdbXTzm9bVhcaUQ6Yr6s:EMNvwj9A/vMHTi9bDU
Score
10/10
Malware Config
Extracted
Family
njrat
Version
v2.0
Botnet
Victem
C2
mission-panels.at.ply.gg :16710
Mutex
Windows
Attributes
-
reg_key
Windows
-
splitter
|-F-|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Payload.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections