General
-
Target
Payload.exe
-
Size
27KB
-
MD5
b8b6504bc8e6ff48234564c40bd22ee8
-
SHA1
3a73427852ada62955a09525f8533e0138c4f8fb
-
SHA256
2c4273a0f2daaa6049f21e5860b5bcba872af38c92a71f146f318f5a776a51fd
-
SHA512
9c0553c92ccaa5ef43d2c1d55386323cb47eb0e82591b71afaf9b3e20fc6707f2cb2ca7441d36c3896948ba153fd577f9f22eb7245d77064d147881016cf0855
-
SSDEEP
384:1L82J1dJFKnO4YLJ5zeZsL4E7O4/ChZGPjdx4kMtAQk93vmhm7UMKmIEecKdbXTI:VXJFPleeHUtA/vMHTi9bD
Score
10/10
Malware Config
Extracted
Family
njrat
Version
v2.0
Botnet
Victim
C2
even-house.at.ply.gg:40766
Mutex
Windows
Attributes
-
reg_key
Windows
-
splitter
|-F-|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Payload.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections