General
-
Target
96accd4ca06250a04a00eb1ca2ceb555e3831021c94493d2426aa09dee4eb5a7
-
Size
43KB
-
MD5
4789e1894c64b49956bc9fb873595ca1
-
SHA1
a3b7b3b492e649a7d016a3099ad5600f249fc6a0
-
SHA256
96accd4ca06250a04a00eb1ca2ceb555e3831021c94493d2426aa09dee4eb5a7
-
SHA512
4e033d46f03d4268de633ae2b94ce65391f105d342577dbda0276f8f48ae96ffc4fb1ceea6e87e3ed3714ac074b8596dda758d9ca59c7d9cd50a75ed9fd433ea
-
SSDEEP
384:cZyBfYdM9qIyrQAlXsCEExuQl4DbzcIij+ZsNO3PlpJKkkjh/TzF7pWnH/greT0k:alCwFrxXHtuVluXQ/o6/+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
127.0.0.1:4040
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
96accd4ca06250a04a00eb1ca2ceb555e3831021c94493d2426aa09dee4eb5a7
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections