General
-
Target
5fda7bd5c8283668aa24c7867080f5536f506984d50a876a9c2c3425e6e2a3c9
-
Size
37KB
-
MD5
fa0f874fd1cf2ec304d8ae82b6c05a35
-
SHA1
9dd7b3c1ceff9419e3d3c17ceebb54f33f6d06ac
-
SHA256
5fda7bd5c8283668aa24c7867080f5536f506984d50a876a9c2c3425e6e2a3c9
-
SHA512
0b76d3fd3be2df5cc371edecd3ce2caf0130193d36eb16e8f375f192caf872f4c89eb52f96d3b5eba0aebc9015fcf8c0651ce7ea3b4526249428b190f542de37
-
SSDEEP
384:EWcNxkitYZf5W9cTYXyc/PNMImzPbonv5ixFrAF+rMRTyN/0L+EcoinblneHQM3G:PcNCjjTYic/PSsv5ifrM+rMRa8NuUqt
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
HacKed
C2
127.0.0.1:5552
Mutex
984559f52d4087243e95e5ad9bb48e8d
Attributes
-
reg_key
984559f52d4087243e95e5ad9bb48e8d
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5fda7bd5c8283668aa24c7867080f5536f506984d50a876a9c2c3425e6e2a3c9
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections