General

  • Target

    New Client.exe

  • Size

    64KB

  • MD5

    66180a9f4f0fb2698c3cb39142f2180f

  • SHA1

    fcf5d935bc5830ac57487d64dcc4e65cb9ac7914

  • SHA256

    da1c0f53cf9266a2485cc43f9f5208dba7da377d6dc0ea45292d7029cec37e6b

  • SHA512

    ef901e45cea5b230419726b8a1536846380cdd7fc77494be5285580dca2fbd92cd0b74de474fba4c0760f9a5143781b8c29361eaffee1814afb405cb78915556

  • SSDEEP

    1536:SOQEsHKoN36tFQviFw1DAb5l2BnvAafLteF3nLrB9z3njaF9bES9vM:SOQEsqoN36tFQviFCsWBnlfWl9zTaF9o

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

test

C2

127.0.0.1:54077

Mutex

NisSrv.exe

Attributes
  • reg_key

    NisSrv.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections