General

  • Target

    9ad8aa46120c872ad7bd855958ba55e39a61b69fa0b7886e5bb958f630bdbf73

  • Size

    23KB

  • MD5

    fa27feccbe63a6ebd230187727ed2ba9

  • SHA1

    459c7b3b6335e8778f585f7c8ac2cc0a7087c53a

  • SHA256

    9ad8aa46120c872ad7bd855958ba55e39a61b69fa0b7886e5bb958f630bdbf73

  • SHA512

    2cea0ce40b4e254b4403b771c9973cb356d48d1305f1e675ed6c0252dcf5bf5f5d1e1cdbe6878a239dced2177b7a4bba252b9f9fc1f745566e40739247e5b826

  • SSDEEP

    384:E8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZGv:DXcwt3tRpcnu7

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:8843

Mutex

2cd3196a2b9282911de43fc52be106ba

Attributes
  • reg_key

    2cd3196a2b9282911de43fc52be106ba

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ad8aa46120c872ad7bd855958ba55e39a61b69fa0b7886e5bb958f630bdbf73
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections