General

  • Target

    NEAS.5323e11bd0c264bf43a4215ba33ce990_JC.exe

  • Size

    93KB

  • MD5

    5323e11bd0c264bf43a4215ba33ce990

  • SHA1

    ba44aa845163c4e7d8a41460dc704dfb6b014fe7

  • SHA256

    7fbff56a5c6c7269baaeeacd2ed70dc625e8e7137b70d284dcd4ba12a17a5f35

  • SHA512

    673baed9352b4ae5e1b5cd0b74dc03103c9f15516431c854a02a60aa87cc8dceff762c05176038513414d2b27712656883bfd759a61fdd9118315fc54518f918

  • SSDEEP

    768:8Y34QdyZnDQMMpAZrGSt6udttXyosahkGJiXxrjEtCdnl2pi1Rz4Rk3VsGdpugS7:UQYZD3rGWNd7dhkhjEwzGi1dDFDugS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKedByMalware

C2

hakim32.ddns.net:2000

0�#r���-`.1:9386

Mutex

6e260ec5ede46d01445436ce38e3055a

Attributes
  • reg_key

    6e260ec5ede46d01445436ce38e3055a

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.5323e11bd0c264bf43a4215ba33ce990_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections