General

  • Target

    NEAS.555579d4a7fe99a06349634f4c3e2800.exe

  • Size

    54KB

  • MD5

    555579d4a7fe99a06349634f4c3e2800

  • SHA1

    a8017cc1332b40dad7b7b0e93f48d7edc31eab1f

  • SHA256

    863658f007f1112ea173b292a10f45816998b2a0e52ce488804da311ff3fce03

  • SHA512

    d86a6c931b829349ebd5a548c4891102657dd4b596ce04958a3fafa535cc074451510be030195bde913389b033fcbe46cf71203a0ccf75198441b13c7e112ceb

  • SSDEEP

    768:eOmhtIiRpcnu9t4hjb+UvnwW4ZLetrZTdke8GkzbjOjvmXbTpkV:eOmhuiRWu969Xpke8TzXOrQ+V

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

secded21.duckdns.org:1338

Mutex

f09945897e28727e09a648ce79ccccec

Attributes
  • reg_key

    f09945897e28727e09a648ce79ccccec

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.555579d4a7fe99a06349634f4c3e2800.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections