General

  • Target

    Builder_JC.exe

  • Size

    37KB

  • MD5

    8b60416fa936140c6439a568af55cb41

  • SHA1

    cd5a3017dd6266446153d2fc4781a81705647eb2

  • SHA256

    cdfc4cd5901a1ffce48d12ec263bfb6e00d850e938053b10398974f41781cc2b

  • SHA512

    78f81ee5d1031f1aa6e2e8f257b141084170d6c9670cc5060c98ff4568b34173f5af219dbcf1f57c9a6fb82fed86a87fdb8744d168711bdcb48f0102a83806fd

  • SSDEEP

    384:xKjoUiFebK7FmpE8QyEfuifpefHCwSrAF+rMRTyN/0L+EcoinblneHQM3epzXoN5:wt2n8LEfuiAvCzrM+rMRa8NuK1t

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

165d6ed988ac1dbec1627a1ca9899d84

Attributes
  • reg_key

    165d6ed988ac1dbec1627a1ca9899d84

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Builder_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections