General

  • Target

    59d6e2958780d15131c102a93fefce6e388e81da7dc78d9c230aeb6cab7e3474_JC.exe

  • Size

    23KB

  • MD5

    0da6d634c458dbf465e2bd38f26fabae

  • SHA1

    18bd53e97707197a7d2923355f7018989c132a03

  • SHA256

    59d6e2958780d15131c102a93fefce6e388e81da7dc78d9c230aeb6cab7e3474

  • SHA512

    72c69e8640b773487b4d1f3c29714960df53260d2cdbdc603bdd340f66b6276e1bb7688b85ab563d14d5f6cda04a6cae1056384b768378b21034000e6c4284e8

  • SSDEEP

    384:7T16I8Tz/w8ndUeC9UCmM46agwOVbuhRmRvR6JZlbw8hqIusZzZlp:MLbWV9nRpcnu0

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

C2

147.50.253.101:5633

Mutex

215abac0ae598e05f2ef13ff21b021b1

Attributes
  • reg_key

    215abac0ae598e05f2ef13ff21b021b1

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 59d6e2958780d15131c102a93fefce6e388e81da7dc78d9c230aeb6cab7e3474_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections