General
-
Target
1179db3cb1329d70adbc2ef437d45fab1ded8b5612c6f97b15dc05c7ee6e40a8_JC.exe
-
Size
93KB
-
MD5
3fded8b6f5d9d5a5fae86f9674ea866a
-
SHA1
ade10613e18a184910beed04eac813e22a102c6d
-
SHA256
1179db3cb1329d70adbc2ef437d45fab1ded8b5612c6f97b15dc05c7ee6e40a8
-
SHA512
fd2549225bf3108a4b190a44401f80101d01691cf6f306a2791203c3450044bbc860ee14310652639c7a972fcfb452b27a01765c6c70ae9c98a95c102386bbb5
-
SSDEEP
768:sY3MUEYJqHQEcRoK0/XIPChTmXIC6t3mSZxEAdXxrjEtCdnl2pi1Rz4Rk3dsGdpE:wUbJz+/XIKhgIF3EAjEwzGi1dDNDqgS
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
2.tcp.eu.ngrok.io:13659
Mutex
d6bc671dd3b3f7e48ec555afe62c35c7
Attributes
-
reg_key
d6bc671dd3b3f7e48ec555afe62c35c7
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1179db3cb1329d70adbc2ef437d45fab1ded8b5612c6f97b15dc05c7ee6e40a8_JC.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections