General

  • Target

    bRbX.exe

  • Size

    23KB

  • MD5

    7456d393f8b3d9f7055d4b8a162109af

  • SHA1

    a73fdee4e77cd1002b7659697b7f220b2d9e80f3

  • SHA256

    388325db8b3ee1efceb9be9796c047c8b686fd58c6665fb1ee3d33d682267876

  • SHA512

    57aa873d3b1f5031c86ebe1f061bf621bfa3bb0e00a919ff69170305c0e5773f49881f7136c7fbeedba83e6379186c5e2b238af464cd282108583c0d35792307

  • SSDEEP

    384:6oWSkWHa55BgDVRGipkItzY6vZg36Eh7FpmRvR6JZlbw8hqIusZzZCm:dJuk9pHRpcnuy

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

vitima

C2

181.217.95.27:1024

Mutex

fb67ed869b7aa425a78c86e4e781ea61

Attributes
  • reg_key

    fb67ed869b7aa425a78c86e4e781ea61

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bRbX.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections