General
-
Target
bNqu.exe
-
Size
78KB
-
MD5
d4b127a7d4e2609d86747eadf6fd00ba
-
SHA1
88754fa2fa044a1bcac7ad1ede8c8cfa533bbdab
-
SHA256
a4565de8728f2196a30e7337c45d94b0b7f8dfca1bd610f5bd0d597e483d1b37
-
SHA512
f7d36d3f931d75793f1ee55bd7be5a3edc8c5ebff198a5eac0d234eb2964c78b6a071c38a1042ea3b4aad50d8be77998d3922c075d4aed838e0b6d5d960f2488
-
SSDEEP
1536:Gh9z+dBLX+DpPS5wpOk3JCK6pFo4j/6fOpd/9nEh9TGaJMR:UWqQwpOk5CK6MO/9ESaJM
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7.3
Botnet
Primas_2023
C2
administradorv.duckdns.org:2019
Mutex
Notepad.exe
Attributes
-
reg_key
Notepad.exe
-
splitter
1234
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bNqu.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections