General
-
Target
d76d2217f9f94b33ba306d4eaaac0c664b64dd63e455b9c5543ca4e581f800f8
-
Size
43KB
-
MD5
2ceda570c5420697304c26fcd8dc339e
-
SHA1
6f2ba3337e778e42fed2d03d6108ac946446e14b
-
SHA256
d76d2217f9f94b33ba306d4eaaac0c664b64dd63e455b9c5543ca4e581f800f8
-
SHA512
2c4b1277099d2b6a09e0612e13c9233c422a486987ea34244cb7c0171b74c92dc31b068565efd513f24c0e0608c3c4a6f0342002477675815cf50a8be1c39868
-
SSDEEP
384:vZyJR9GPCZyeO1UOFlEoIdb4zIIij+ZsNO3PlpJKkkjh/TzF7pWnH/greT0pqfA8:RE4aQeUUuQouXQ/oO3+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
item-religious.at.ply.gg:17961
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d76d2217f9f94b33ba306d4eaaac0c664b64dd63e455b9c5543ca4e581f800f8
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections