General

  • Target

    179478c925ef441ff179a9b42493fb39.exe

  • Size

    23KB

  • MD5

    179478c925ef441ff179a9b42493fb39

  • SHA1

    11b5f98e834d739cd9712ff018af3f9d55ef6999

  • SHA256

    45a3a773aa1551f8f73f3dc1dcae0385bbf8b1d99b25929cb661ae20b6b3fc13

  • SHA512

    d606617ba831ddf8b3c55070d8611d6ffc039d17a2196b8b6356738f0f5d589fa40bbca0fb7cb904d53b058ed76510c86a26fe2edd9acf99e1ad811aec61d252

  • SSDEEP

    384:UoWSkWHa55BgDVRGipkItzY6vZg36Eh7FpmRvR6JZlbw8hqIusZzZwWa:DJuk9pHRpcnudp

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

camera-shadows.gl.at.ply.gg:48659

Mutex

97b58a06e9c88b28bf2602ea3047ff4b

Attributes
  • reg_key

    97b58a06e9c88b28bf2602ea3047ff4b

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 179478c925ef441ff179a9b42493fb39.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections