General

  • Target

    Server.exe

  • Size

    23KB

  • MD5

    d038658f0dec4cd4af6f98ed89cc4dff

  • SHA1

    19eb84ce6c6ccbbf75bef28e9eca14e32caca8bf

  • SHA256

    ac5dcbc32cf67f1e9523ee2a3908b76b8d2fd0af6f85d86e14a871d2f8051d96

  • SHA512

    bee3590936948d3ead95fbd2deb3f9070f71870f76975f521bb751276200ae8a4982b2daf3ff001bc0c26f1f457de2896b6a9a847284656d7310abab8b531acc

  • SSDEEP

    384:ywTSiYWD2Z7w3CsJeiecwJ3fw6FgzeAh33RtmRvR6JZlbw8hqIusZzZjO:xvZiBK1edJRpcnuV

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

misty-sun-47407.pktriot.net:22264

Mutex

d497022b2d91dc12b1e88e2388629b09

Attributes
  • reg_key

    d497022b2d91dc12b1e88e2388629b09

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections