General
-
Target
WindowsUpadte.exe
-
Size
27KB
-
MD5
76806ac126e155b0c620faea7cc90c87
-
SHA1
5dba8d8564bd62c7c67402c2f9410b69e159b750
-
SHA256
d97a55c9d2d8be338323604c10598c99705cc5752c97f071a1e62a76adfefbab
-
SHA512
ba3a95fc734903c27eacb5deab6f9518f7864692c218165401bc8bae3c67c7ec3bc15ea81ea215f6dbedec7bde5f4599c9663dd04e6e2a1adfdda445671e4691
-
SSDEEP
384:ULno5YXeOGgkB6LzwfC+mWPpJRzMVAQk93vmhm7UMKmIEecKdbXTzm9bVhcag6O1:C0CCOL46VA/vMHTi9bD
Score
10/10
Malware Config
Extracted
Family
njrat
Version
v2.0
Botnet
Victim
C2
no-sofa.at.ply.gg:56887
Mutex
Windows
Attributes
-
reg_key
Windows
-
splitter
|-F-|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
WindowsUpadte.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections