General

  • Target

    onetapcc - Copy - Copy.bin.zip

  • Size

    11KB

  • MD5

    10c729dbe846f6db5ad442b55da3aca9

  • SHA1

    e37a646a56a8e154b4ec34355e2c9fbe03cb89b6

  • SHA256

    6dde9b813d497602d390f7a6f70648399da194bea488525061ccf85013e9f303

  • SHA512

    01087b2fcbb68fde1c7cf2eac3fc8e8afe1907ddc8098d68eddcf0ca0e207def37c6e7bd87928077ff4a3414999607f3f6dcf0370f93d6947f19b6dea4bc64a6

  • SSDEEP

    192:1L2qGIGEHP6ldIc1xL3F9AlrWfbvT49HbhYgHftdE9wsM7t8ptYVNL83lixiqxzG:1L2qGLySl2c1x5q4fb74F/tdES9KkV21

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

insurance-smith.gl.at.ply.gg:54779

Mutex

3dcef34885ca46282a173f90b56bcae7

Attributes
  • reg_key

    3dcef34885ca46282a173f90b56bcae7

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • onetapcc - Copy - Copy.bin.zip
    .zip

    Password: infected

  • onetapcc - Copy - Copy.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections