Resubmissions

12/07/2023, 18:10

230712-wr98wsfc7t 10

12/07/2023, 17:18

230712-vvsmksfb6s 10

General

  • Target

    Server.exe

  • Size

    37KB

  • MD5

    2a5d7daa0f260413c4e780e8194dfeef

  • SHA1

    495b1c16023fc4c26300e62f56ea7e6099cdad04

  • SHA256

    b4a5e1e568e41cf072416887df11454e980f2da237804da568dc74580e339712

  • SHA512

    2f2812110a69bfa2fd70af87a803c4d9b6cedbc50552968160d34f0b3561874016dda412fb1a8a51f997a60f73cd49647e03daf21cc79e0a884091ee016d3da7

  • SSDEEP

    384:vvrsiDJT95hL5YyUvPFPtOG4imkzlrAF+rMRTyN/0L+EcoinblneHQM3epzXOSNH:nFv5zUvPFL1m+lrM+rMRa8NuASjt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Armagedon

C2

26.17.19.114:5552

Mutex

318d3ea7df357052bacdaf2746f78f21

Attributes
  • reg_key

    318d3ea7df357052bacdaf2746f78f21

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections