General
-
Target
ab8405c2bec574901f93a2f0bd062a7b.exe
-
Size
43KB
-
MD5
ab8405c2bec574901f93a2f0bd062a7b
-
SHA1
fe69f5e501231c99d2b705da9d958c2ba1deab16
-
SHA256
cf2dad577ca320380e2c4cd1cd93f318e7720fd1f090d97dff5aa416bda55912
-
SHA512
81f6bad9e51fd014829160f657ae9f5155058d2eb3779c67cf052f804b508fcb03e4320ac0b7e1b2026bbe2a4e9bc4b44d3339874dcdd597ac8e3e23a0e952ac
-
SSDEEP
384:Q8ZySa33VarE8yTNJFqfQYMEnwpai0+dzEIij+ZsNO3PlpJKkkjh/TzF7pWn7mgm:Q6xq3MY5TnFqfpMpLuXQ/oWC+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
0.tcp.eu.ngrok.io:18364
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ab8405c2bec574901f93a2f0bd062a7b.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections