General
-
Target
xV0aWLFtJKKg.exe
-
Size
78KB
-
MD5
5658dd93a8379d6c46126a380ceb8b50
-
SHA1
4de37a6d63ebd5f89a96eb8f832c12dbf21c38ce
-
SHA256
8539d8e44e928a23ef872c5a8ad4d4e632c9f489a013a5b29d36d15ac2767b61
-
SHA512
a355e0e5b0c8b9933233951758d63fedcf4c8813b84ba9844334e4b6c2eb5b30566294bcb5fd33f6684576b77175369214f2f469a66e0b6647331f81c93dafee
-
SSDEEP
1536:qpbXx+1CmYDp2S5wpOk3JCK6pFoETQ6fOpd/9nEh9TGGhJcR:OwQwpOk5CK6pO/9ESGhJc
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7.3
Botnet
JUNIO777
C2
verderesilencia.duckdns.org:2010
Mutex
Client.exe
Attributes
-
reg_key
Client.exe
-
splitter
2023
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
xV0aWLFtJKKg.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections