General

  • Target

    Client.exe

  • Size

    31KB

  • MD5

    ce16149ea29e2ec5b37ba7469dea161b

  • SHA1

    ded3c6398b558e9102bb1b0ad9984f7a1638b209

  • SHA256

    6a0be8cd26c4a212f5c6e4e57daf3fb71c679d5a7b97bf6b2237cde4414acdb8

  • SHA512

    e75f049444cb855549b8ab17e268010d70839ad5f9ffdf332098bf55e93842c40fae1f5342a3599653435c6d4f5700b7a307c6bb9539f137dc984b63164a6f85

  • SSDEEP

    768:sFG5TP1/plIzxTCfVYAvN1Zvy/QmIDUu0tiUKj:Rb1ay/YQVkOj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

127.0.0.1:6522

Mutex

60c28f2ec9c1d3d7f391e11534af955e

Attributes
  • reg_key

    60c28f2ec9c1d3d7f391e11534af955e

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections