General

  • Target

    747cf93ddee9183764e543b2e1a39fe6c36f0d87c6b66f67786453db30262b53.exe

  • Size

    93KB

  • MD5

    ad6a5dbadf6843f113872caf3fcd8b4c

  • SHA1

    13547ec99e18219477b2c8d73e3c6f365e2d6a72

  • SHA256

    747cf93ddee9183764e543b2e1a39fe6c36f0d87c6b66f67786453db30262b53

  • SHA512

    018fa670ea28aa61ec30a04e23c2f17d9a943542366f38c82a18ab3c0caa870ba4a931ea38b50d09bf7643d00d00284e7eac948ca48c82ddb4b115fd18e5a7ef

  • SSDEEP

    1536:pUPTr1IDavlZhbSKa9YdjEwzGi1dDoDTgS:pUPSDavlZIXmqi1d2M

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

45.137.69.211:5552

Mutex

7c4dfa02bf2473466bcfa68faef9aca7

Attributes
  • reg_key

    7c4dfa02bf2473466bcfa68faef9aca7

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 747cf93ddee9183764e543b2e1a39fe6c36f0d87c6b66f67786453db30262b53.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections