General

  • Target

    NEAS.720b50c46677f19549fde81ff95d9b40_JC.exe

  • Size

    31KB

  • MD5

    720b50c46677f19549fde81ff95d9b40

  • SHA1

    672606627a1906cc5b3246d004df236eef166a11

  • SHA256

    1f27e3e67e4ef956e25198d4358282e05ef20dca90236cc8652fb24c888d3e3c

  • SHA512

    a5d22dbf5c2c970a92b496983090e55007bd51c8312297be9e30ac3ca387d22d38bafa480a2dfe8db1a274b11025772bb8f57d733a8e2d91f468d6e8edacbf6e

  • SSDEEP

    384:isqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZvxhy:9f65K2Yf1jKRpcnuSo

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

sxtrm.myftp.biz:5552

Mutex

83d48929bdcdaf360ba96d48bcabe6dd

Attributes
  • reg_key

    83d48929bdcdaf360ba96d48bcabe6dd

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.720b50c46677f19549fde81ff95d9b40_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections