General
-
Target
69c79244c7c29b7bf8f22fb33f422d13
-
Size
93KB
-
MD5
69c79244c7c29b7bf8f22fb33f422d13
-
SHA1
8e14b63cf116b7ae7df97ca9384cdf9d97a80abb
-
SHA256
79e35f8c4808067bed9e67f226c2b7b177d8e36756b215f2b80a52744e4e98be
-
SHA512
c2c3f91e95d812b1dcdfb49de7acee031ddf04e3e662eb12911253d53dc1b2fe68d0518c46c261c4fa64e8a7b9a12ca09bf5fefea34e0be4c8ffc9052bc595b6
-
SSDEEP
1536:zOOC+xhUa9urgOB9RNvM4jEwzGi1dDRD4gS:zOYUa9urgOtdGi1dNh
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
lol
C2
hakim32.ddns.net:2000
192.168.1.103:80
Mutex
ec1861fc74d1f2e56a703f40865c934d
Attributes
-
reg_key
ec1861fc74d1f2e56a703f40865c934d
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
69c79244c7c29b7bf8f22fb33f422d13
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections