General
-
Target
1b935fdab6c68f2cd1af5a4dca9617d7
-
Size
43KB
-
MD5
1b935fdab6c68f2cd1af5a4dca9617d7
-
SHA1
049328712e3e373633de3d4a98e986e28a723af7
-
SHA256
70573373706d56dda921a2ab37e1fd9636e47fba3e4f6e04aa112cc749ab6136
-
SHA512
3212f1e7120cf3c0b71310642c9c406c2105530ad64cde04da44aedb03ae164dfa0bf5befad7104c5e48f72b814143875e76d520c74e20972dd10ba1ba1960f6
-
SSDEEP
384:CZyZQoC98Na5yCQRJtrWP7ZEgL+l608zsIij+ZscPFYIKl1rJM7fAiKdy4FEuzgW:wgCywwCg9A728uXcPF/KP1M/KdyCL+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
???? ????????
C2
127.0.0.1:8921
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1b935fdab6c68f2cd1af5a4dca9617d7
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections