General

  • Target

    18b7b51ab055f7af12a53b1d2dd63f95.exe

  • Size

    37KB

  • MD5

    18b7b51ab055f7af12a53b1d2dd63f95

  • SHA1

    c287aaccf3d40d08fce75a85932a6f8dcdc72565

  • SHA256

    04b83cfb61645ef6aed2768b17841cad50bc34d31ac4c8311fae8a6038b23cb6

  • SHA512

    5cfb295a3cdcabc2954133b0763caee6d70e918b76f3fde63148ddcf978e8c0ac73b56ed47afd5725c851c0d034e407634b47b87999e422376a09acce817ff48

  • SSDEEP

    384:Z3Gwkfsgwi+Jx3+j/NSyszkoAXVs3G6aBrAF+rMRTyN/0L+EcoinblneHQM3epzk:Npkk/CNhszkoA+26OrM+rMRa8Nu+ht

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

147.185.221.16:33087

Mutex

0475d37e6183d457eda0a2896dbf2265

Attributes
  • reg_key

    0475d37e6183d457eda0a2896dbf2265

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18b7b51ab055f7af12a53b1d2dd63f95.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections