General

  • Target

    2f7023be5cffe476559b07c7cf8035fdf6f2327ac4331effabef250164d7c263_JC.exe

  • Size

    31KB

  • MD5

    0000a96752417b5681728206855b2c49

  • SHA1

    38b037efedafa3a50dd98ceffea23032f939c3e5

  • SHA256

    2f7023be5cffe476559b07c7cf8035fdf6f2327ac4331effabef250164d7c263

  • SHA512

    f3b15b22068ed0af5a5c232f9ab04781ced28e84e3f7e0c96e656440ebb0a4462738a493f6cc891414822b2f53e1f3c86e2e3e5790c14703540e74f8942d49df

  • SSDEEP

    768:yLorDp8pdvXyzx9uFwna/5nW3TvanQmIDUu0tif2j:Xw68nQbkQVkzj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

dugpanan.ddns.net:2247

Mutex

cdb09b7e00330671fe79126230922d8b

Attributes
  • reg_key

    cdb09b7e00330671fe79126230922d8b

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f7023be5cffe476559b07c7cf8035fdf6f2327ac4331effabef250164d7c263_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections