General

  • Target

    NEAS.01ad2607d83d3dd2f9cbf5b4a7f27a40.exe

  • Size

    29KB

  • MD5

    01ad2607d83d3dd2f9cbf5b4a7f27a40

  • SHA1

    8a6a5af5da0fe83927d75002f234c2fff0039dff

  • SHA256

    916fb5d8fb271675f33908155f6a18dee8a2581b3e8e8e1e48c2d5b094997ba0

  • SHA512

    2b2b3cfcdfd0e46079c3ad51366ec2c8a49099251e6a3edb1a66d5fe41e662d4806cc43aba9bd76f5751525970fd897e68f43eb60cccf15383ebdeb804c63d62

  • SSDEEP

    768:82u75oa4fu124AqFjXeJBKh0p29SgRUP:w75CPkj8KhG29jUP

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

humam90.no.ip.biz:1177

Mutex

5cd8f17f4086744065eb0992a09e05a2

Attributes
  • reg_key

    5cd8f17f4086744065eb0992a09e05a2

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.01ad2607d83d3dd2f9cbf5b4a7f27a40.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections