General

  • Target

    b9b5ed22f0b77aba20a8c6472845824e.exe

  • Size

    93KB

  • MD5

    b9b5ed22f0b77aba20a8c6472845824e

  • SHA1

    036487bc02cf0620ae56c012cca24045bbb62a17

  • SHA256

    a4181240d94492f7b3a61ff03b4f48c48d43584b8ee3a7320193046064231bf2

  • SHA512

    1cc2197dee14eaf10484b2c8d549830435ed11a57ec0c792041543571646a644bbd2b451bc066bec6d8b8b8f7f43cd2bf50630be8a79639bd94fb9c29e11e7a7

  • SSDEEP

    1536:6azJD/HBZbszKu9AZpN7r1jEwzGi1dDCDDgS:6aSzK4AZHHCi1dM8

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

БРООООО

C2

hakim32.ddns.net:2000

0.tcp.eu.ngrok.io:19740

Mutex

0035283a0e7555f05a602eca16c07005

Attributes
  • reg_key

    0035283a0e7555f05a602eca16c07005

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b9b5ed22f0b77aba20a8c6472845824e.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections