General

  • Target

    237dd93cf8dbc052febc48fb11a1dcac.exe

  • Size

    93KB

  • MD5

    237dd93cf8dbc052febc48fb11a1dcac

  • SHA1

    7dd960b4021efd1ee9b93c6845aaf3107ba54738

  • SHA256

    6f9feff46ec4fb9b411181d99c2defd95ae8871edd784f3703aa19ffadb9119e

  • SHA512

    2d2612c0c915367be6e93baa5dff6902ad12976b394282f7b3d2a22a4ea039defd37bd4af6ea46f55023a2dc542a7ecec0d09fb76a5b0508c5217e2a671fe649

  • SSDEEP

    768:5Y33C5hWXxyFcxovUKUJuROprXtwNzeYhYbmXxrjEtCdnl2pi1Rz4Rk3j7sGdpd3:ACHWhIUKcuOJgPhBjEwzGi1dD7DdgS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

user666

C2

hakim32.ddns.net:2000

6.tcp.eu.ngrok.io:19832

Mutex

8c678718a52d0b1d5c51b41d3919d10f

Attributes
  • reg_key

    8c678718a52d0b1d5c51b41d3919d10f

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 237dd93cf8dbc052febc48fb11a1dcac.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections