General
-
Target
066f0a61b8ceb0dae6ee3835ffec50ad.bin
-
Size
34KB
-
MD5
ca470e9152d20350bd1658c7325a7c15
-
SHA1
9b9c332c2682ef2d31e0f46f08ea71cb5e646e86
-
SHA256
d55b98ca371de0dc5ca3749d1932e14a8f5eaf91eb6c6406f4cff2d5d0598cd8
-
SHA512
65561b09f5ec7a08bf2aadb54d13acba3267843313ecc6d419c3fe57c5a6685a998e451914302dffb24ad7d22cd2ea5781694c96e88d5d6ad81cabb1b2a6eb71
-
SSDEEP
768:nNw+/af2x/bVcTTTRUpwbr8pxKVyXwkoStEjgPTclXVAS2M:nrCI5cTTTaSrdEPTmmS2M
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
7.tcp.eu.ngrok.io:10241
Mutex
6221d0ae55a72306dbada8db516ce5dc
Attributes
-
reg_key
6221d0ae55a72306dbada8db516ce5dc
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
066f0a61b8ceb0dae6ee3835ffec50ad.bin
Password: infected
-
3a5ff4bd63b123534c8530042cbe88612a96be4f46e37b3eb39069c3d8dbe2a8.exe
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections