General

  • Target

    3973c208abc70b8581d0e035808cd637

  • Size

    27KB

  • MD5

    3973c208abc70b8581d0e035808cd637

  • SHA1

    d74b881d44c0473c3d105e8fe01ad1914c3137d7

  • SHA256

    0894586975f19c4625cc7b199e5df804e830117af56234866fea94bb4a96bb95

  • SHA512

    2d387de33bda62474c8a42c021a21534e85bbb7fe1d1574cbf86bad21167d73f6f3fa07cae3e58a3a17e1d81563c9640de822fe6382323b2430d48f018da0775

  • SSDEEP

    384:uLWwSHanO4Y7aJMEoeBCsPodxxMzAQk93vmhm7UMKmIEecKdbXTzm9bVhca769rP:4K/gVt3zA/vMHTi9bD

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v4.0

Botnet

HacKed

C2

154.52.42.228:5552

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3973c208abc70b8581d0e035808cd637
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections