General

  • Target

    New Client - Copy - Copy (2).exe

  • Size

    65KB

  • MD5

    a97418983327443a206654cca8bcfee1

  • SHA1

    bd35cd8060032343bc30c61a14f559589758b3b8

  • SHA256

    4f2fb9d8928b5087960d7807d8cb0f2fb2a11291f539e1f18326a7baf0f7e191

  • SHA512

    a15470019d89c685897a18932d46d0ac73f656bcaad65c042881d413860fa48c500b22d833fc384ee24448c188aaac6f00ccce586d4f4b4edbe28a91e438bef6

  • SSDEEP

    1536:zS10zQoN36tKQviFw14fnqBnvb7fLteF3nLrB9z3neaF9bSS9vM:zS10zQoN36tKQviFC0qBn3fWl9zOaF92

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:6522

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client - Copy - Copy (2).exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections