General

  • Target

    lkj.exe

  • Size

    30KB

  • MD5

    39e6fd23897870a66c44c58876c2fc34

  • SHA1

    d0e23d715aac8f658ebb0a7d9ddb2fd37a242a5b

  • SHA256

    473544c18ddb6ed4579f3707a84bad583b3ca7cf58243d3d45eeb9d736002369

  • SHA512

    db6704673b2bb3d332dabf575a988e5144ea0e6599324694b37a407d8084aa1087547194286da1555ec39eeb40bc655126b926ac5d26115fda7c6846f8b181b5

  • SSDEEP

    768:djYKCtb1uszxH63W3KnjrvFv9jQmIDUu0ti7Qj:pCzhaJJQVkdj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

lev

C2

opportunities-rendered.craft.ply.gg:39858

Mutex

cb407de962fcb8e0c6921db50e7d21c2

Attributes
  • reg_key

    cb407de962fcb8e0c6921db50e7d21c2

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lkj.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections