General

  • Target

    07b0e8f5a67adcc50fedec303e071a67

  • Size

    48KB

  • MD5

    07b0e8f5a67adcc50fedec303e071a67

  • SHA1

    aa638b5a1346c82ad70d28279956974df1c7d806

  • SHA256

    861f0e4a69b7fa6a663553ef0a7c2148b27013402bc67fad90b6e748eb85723d

  • SHA512

    e3e5e325cd1834b656e6e04b29870035756d6efdcaded75984edf840da5ad059c34eea9abcfb1724c8d666c85065b6c2e914bc6ab555967a83b0ad865c68d65f

  • SSDEEP

    768:zdPSSuCN/Mlh3LH1FLw4Q1rCyGC3bqIx9EoTDPbl3q9HfHTjrB6ddjbNsHgD4+i:z9SSVNiH1G46FhxRP1q9/8yADY

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

taher1dexter.camdvr.org:6522

Mutex

a679715e2cc4e4f7a4eb7c5e826e9d04

Attributes
  • reg_key

    a679715e2cc4e4f7a4eb7c5e826e9d04

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 07b0e8f5a67adcc50fedec303e071a67
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections