General

  • Target

    b7a78039c28b0651b98e724e467b7ae2.exe

  • Size

    93KB

  • MD5

    b7a78039c28b0651b98e724e467b7ae2

  • SHA1

    ec86bf60519e232be075af5f3adc11464e5ac35d

  • SHA256

    76a792f785b44066a7b802ef54cb979562357151be7e4eb5624dc929799603ba

  • SHA512

    bfee74ee135312163e06ee13bece5459b25065b28796e1bef1f03101a46ec0f5090a5318aa21dd51e2c167f39ed1993c54799eb15a36c33365ef40fd7eaadd73

  • SSDEEP

    1536:nUNJD/HBZbszKu9AZp77r1jEwzGi1dDswDxgS:nUUzK4AZtHCi1dDu

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

sxDWE2

C2

c2NoZWR1bGUtbW9ydGdhZ2VzLmF0LnBseS5nZwStrikStrik:MTcwNTc=

Mutex

cb410b9cd087a1b0098ca8fb8248c6e8

Attributes
  • reg_key

    cb410b9cd087a1b0098ca8fb8248c6e8

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7a78039c28b0651b98e724e467b7ae2.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections