General

  • Target

    x55tztSxBzdc.exe

  • Size

    78KB

  • MD5

    06ea5b2fc11dcb7066e00860770e4212

  • SHA1

    a5cd6556d999764db65b51e2787903a6ab48e52a

  • SHA256

    9f76065163bfff36705d6b414f349be85b59c4bd666226c35defa13768691ce8

  • SHA512

    4980ea40ad47f84f8c99242bda357b7f272ca86710f0118290cee81a919686e923f86c589585be55e40084a68a0de6632a6829bcb06ae9751d356e2d56c317b3

  • SSDEEP

    1536:1VZe+JzWubDpaS5wpOk3JCK6pFokTg6fOpd/9nEh9TG/bJ7R:VOQwpOk5CK6JO/9ES/bJ7

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Pipiropi

C2

verderesilencia.duckdns.org:2010

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    2023

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x55tztSxBzdc.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections