Resubmissions

12/07/2023, 17:15

230712-vs238seb54 10

12/07/2023, 16:55

230712-vflwgsfb21 10

12/07/2023, 16:52

230712-vdthjsfb2v 10

General

  • Target

    Server.exe

  • Size

    37KB

  • MD5

    bebb0d9caf052c34125b1e11104e855f

  • SHA1

    d4139bc4986b5367b1150a9db969ed54ff026724

  • SHA256

    5342827e72b67296a825ee4fed6c38926acc122af9af3ef23f05a984c0757516

  • SHA512

    c3462d8122c95f2ed57181a479bd4c0059c5dce7653940bb325872294ce41b1d958e23d58fd9843fcca74266ab84c5a5adf31460715dea6bd13b5d69a90f8891

  • SSDEEP

    384:harsiDJT95hL5YyUvPFPtOG4imkzlrAF+rMRTyN/0L+EcoinblneHQM3epzXOuNj:0Fv5zUvPFL1m+lrM+rMRa8NuAubt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Armagedon

C2

26.17.19.114:5552

Mutex

318d3ea7df357052bacdaf2746f78f21

Attributes
  • reg_key

    318d3ea7df357052bacdaf2746f78f21

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections