General

  • Target

    66677ee876512686ee0acd3d1f85d4a4

  • Size

    23KB

  • MD5

    66677ee876512686ee0acd3d1f85d4a4

  • SHA1

    71ed2553e4457cd62d37a03e11b5d5f90ca03cf7

  • SHA256

    d3f35c31dcc7b13ab7476395a27fbd81822049e3c33da0dc0f13595e7f36b628

  • SHA512

    9466671dc013676ffaf8f3baa1f432f7ff9de70796ff77d439d7801983c4ac1a4b148187687f3bec4ae7ed9c0f5049ca75526b7f090ec61159558ebe3e66a7ca

  • SSDEEP

    384:fc6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZrT:9e9EJLN/yRpcnuw

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

mogasolution.ddns.net:1177

Mutex

8eb3dc33a038541a526b690674af9470

Attributes
  • reg_key

    8eb3dc33a038541a526b690674af9470

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66677ee876512686ee0acd3d1f85d4a4
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections