General

  • Target

    Server.exe

  • Size

    37KB

  • MD5

    738b663cfc11cd8d13b649e744f2eac9

  • SHA1

    acff033151fd4edb675e50e0be2276a0a4ccc97b

  • SHA256

    f0a7d5715cc34a12f251c0a9534f668d0869bc1c152c3ff41df94d3f09b2f5e7

  • SHA512

    f85951bd539a78f8b8a332cbbdb24d9597b7acbc2f1beab2fbfe8607b8c58f99c1e38e76dd78af915b36238e77e2051b1e87dd8cdf415545ccdcc5de48e89ac3

  • SSDEEP

    384:DansiDjT95hL5YyUvZ7vLOw4qYddlrAF+rMRTyN/0L+EcoinblneHQM3epzXlNr2:2vv5zUvZ7blYrlrM+rMRa8Nu/kt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

dcsacrevc-46676.portmap.host:46676

Mutex

bfa7039437aa776a2ddda121f403086c

Attributes
  • reg_key

    bfa7039437aa776a2ddda121f403086c

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections