General
-
Target
ff8d518efa664ec141a2c5f6ee33e232000a6b115796c0e2f1624f2af183fc3f
-
Size
37KB
-
MD5
7a0175a4a0f4223e68a3f8b48177c246
-
SHA1
ea35b79e907c9d52055793d0d2caa4171b966d0f
-
SHA256
ff8d518efa664ec141a2c5f6ee33e232000a6b115796c0e2f1624f2af183fc3f
-
SHA512
9ab972b25674b544afa208dc967d383873ce37199ffcb6f279ece5f0e575a5f5a0738f4eac8813159a23cf3ff5695dd880dbe0553a26b683b2615e31d3be2f3e
-
SSDEEP
384:iHurT8PgibBjpPu7w9qyMTO1P5IsW+LJbrAF+rMRTyN/0L+EcoinblneHQM3epzY:HQNN9ZMTO1GV+prM+rMRa8NuhYt
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
HacKed
C2
16.ip.gl.ply.gg:35642
Mutex
2fbac422cf07acd62be92f1b536afb7d
Attributes
-
reg_key
2fbac422cf07acd62be92f1b536afb7d
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ff8d518efa664ec141a2c5f6ee33e232000a6b115796c0e2f1624f2af183fc3f
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections