General

  • Target

    715f1b0391a29ec938b33ab8efbeb1fb

  • Size

    14KB

  • MD5

    715f1b0391a29ec938b33ab8efbeb1fb

  • SHA1

    c60d9cd7c292a535e5108421cfd05a93e7e41f8e

  • SHA256

    357f9d78f25616a32835ee27ef5106ffe17a25142443449bb91f74d3013032db

  • SHA512

    f4c92e343b5505dc57e2cfe76ab4b81779a6c8690cb740852c0dcb8639fe2454ba30910f868d9f1901c70c37a829bb1ed2f47c2e34c67bc252fc42c8d0ee53c7

  • SSDEEP

    384:f8N8LJKLvOktCzFcEtbcHmIQPXTD8uxjR5G4MuB6qD+YRjWf:f8NMKTMFKG5UuJGcZ3VWf

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Hacked By HiDDen PerSOn

C2

127.0.0.1:5552

Mutex

ccedfcf6c833355573619d64c1fe7aea

Attributes
  • reg_key

    ccedfcf6c833355573619d64c1fe7aea

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 715f1b0391a29ec938b33ab8efbeb1fb
    .rar
  • Private DR 8.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections