General

  • Target

    6d26e923d1656ea020b1d60bf11f3c532d80a28f1e1ab2895cba6200202490c2exe_JC.exe

  • Size

    43KB

  • MD5

    ad2ed16ab7cd516c9c2c99c524b5081c

  • SHA1

    da1105a560950c513cf4db8cf9e9a0d375c77f32

  • SHA256

    6d26e923d1656ea020b1d60bf11f3c532d80a28f1e1ab2895cba6200202490c2

  • SHA512

    9b14603b2938a52a618291fe1eb87a0c07cf5357672f2a3cc0acaa194aef4af81fc89f121fda93fc63e1bbf37c84e56ae3638e9051d87f4772bf5abfd2418153

  • SSDEEP

    384:h8ZyIQp3VarE8yTB1fqrkMwEnwDai0+TzEIij+ZsNO3PlpJKkkjh/TzF7pWntP/l:h6rC3MY5TnfqrxQDVuXQ/oQP3+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

7.tcp.eu.ngrok.io:19100

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d26e923d1656ea020b1d60bf11f3c532d80a28f1e1ab2895cba6200202490c2exe_JC.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections