General
-
Target
b3e47d5fae7a9436b907561eda281003.exe
-
Size
43KB
-
MD5
b3e47d5fae7a9436b907561eda281003
-
SHA1
f3581d07842884e38f14e4225ab0cc3d33e12b3f
-
SHA256
f56adddc01b3d0b2f34048f076c5d5c1c99107d2036da59319961432bc9ba99b
-
SHA512
46566be99e2ad20423c26efaa1d6e988fc0af9e4f7ee38856bc4ab567882a5b25dca57548bc4ab47e198bc6eb41e71593b5b770b009a2952bd16c0dc357a4b5b
-
SSDEEP
384:+ZyqCFIB+oyiB5JQ6gEv4vIubzQIij+ZsNO3PlpJKkkjh/TzF7pWn2KgreT0pqf7:E0+IliTJjg1uXQ/ofu+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
User
C2
4.tcp.eu.ngrok.io:14650
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b3e47d5fae7a9436b907561eda281003.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections