General
-
Target
38e159243e451831d58f191bf027f88c.exe
-
Size
43KB
-
MD5
38e159243e451831d58f191bf027f88c
-
SHA1
533798da369c405a347a59a21062e75f31ca3065
-
SHA256
3bc719432f503c057762d2de93c2598f0cd5c086e68e1f804f9035caa67d2a74
-
SHA512
5da370fcd192567c452c0f5c102d1299939ede64bddf2a217c0cfc1c92f05c1463fb03a7824ba98c4c48530049c07903be314d4f4c2ae482b75f6735a2a2f3d1
-
SSDEEP
384:N8ZybjqyCEFmVoyb37ilaY2EdizMgh+zEIij+ZsNO3PlpJKkkjh/TzF7pWnOmgrq:N6yjqyVAVlbLCHKQgWuXQ/oXC+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
0.tcp.eu.ngrok.io:18953
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
38e159243e451831d58f191bf027f88c.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections