General

  • Target

    C5C1C699B0F3AE7F590C635293AF07A9.exe

  • Size

    37KB

  • MD5

    c5c1c699b0f3ae7f590c635293af07a9

  • SHA1

    1b34e23a0ff16710d2da9b9a6d74fe17a41a41e7

  • SHA256

    c952da89ed2d37ec54d0ee9240b08a2815133f85903393fde096b78896cfa44c

  • SHA512

    214a6ce0df9e6df9c500a362d1ec6343b330248e20bbce902de00574a4a81c118cd32504043a0d5218d0d53e110352af711e86bac4e8489d6ea5d4f9bade208d

  • SSDEEP

    384:GS+6WIiejtCVLO309Qmykrt4QdqMjf+vWEWYrAF+rMRTyN/0L+EcoinblneHQM3:MHdGdkrOGb+eE7rM+rMRa8NuTZ3t

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

103.97.209.13:1313

Mutex

733291ba0cced456fb110f341aeb752a

Attributes
  • reg_key

    733291ba0cced456fb110f341aeb752a

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • C5C1C699B0F3AE7F590C635293AF07A9.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections