General

  • Target

    gen.exe

  • Size

    37KB

  • MD5

    68ed0a1064123b9aba449e8cf2debd86

  • SHA1

    fdd292df0f27c2d7f74f3a0c184e001ac9639ffb

  • SHA256

    ad04d48501ec9c2b5c9df5bacafa466a0bf1556fad39bb472eb4cb6b83813532

  • SHA512

    a9e7f930e6eeb88d0ea57667b2cec542454391519a5e0fcfea998fe0114f339fb3bf138d457d70bf5f76569125a35506d9f26f094ed08a01c9030e5b1ea03877

  • SSDEEP

    768:PpbpxKjjTYic/be0PMmrM+rMRa8NutGMt:HojjTYLDe00Z+gRJN+G

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

127.0.0.1:27019

Mutex

c0647cf3b0571461e91cc5a5a0a788fc

Attributes
  • reg_key

    c0647cf3b0571461e91cc5a5a0a788fc

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • gen.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections