General

  • Target

    262cb9fe276a73f547aae0e91c799435.exe

  • Size

    23KB

  • MD5

    262cb9fe276a73f547aae0e91c799435

  • SHA1

    697a363509eede0cd0c703639849d860d776f4ed

  • SHA256

    8a0ee7d1af6f42a169a239ea1e8370726c52fa5b8eff3269ae9c69066442371c

  • SHA512

    c3b4ed80648a2cc7ef3b3f3799ecf93b1473cdda41c6394365ffd60d2ec8f5eb3ec00900b78aba6f721dd79a5d35d317c1cb8eda01354b7a073f8f664c3fc147

  • SSDEEP

    384:T7sqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZAT:TQf65K2Yf1jKRpcnup

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

FRANCE

C2

milla.publicvm.com:1177

Mutex

3baa1aadbfa182fd1ef75afa26cb65fa

Attributes
  • reg_key

    3baa1aadbfa182fd1ef75afa26cb65fa

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 262cb9fe276a73f547aae0e91c799435.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections