General

  • Target

    22c5be8c1c5be0029fd1979d4032e177

  • Size

    126KB

  • MD5

    22c5be8c1c5be0029fd1979d4032e177

  • SHA1

    476a6ee5ed5b6174570173ab21b21be836abe0b6

  • SHA256

    4ed736782515078d2c602ae701f7b329033e5e84cfd70eb38c088100611f5332

  • SHA512

    96baa73cd29a1f127ff1bb3587d0eccba992fd9dcb1f3951020f5068d482bc918508ac0a05d0e9551924e590bc350945b1a5f64d8207a29a22d5563588d422c3

  • SSDEEP

    1536:C7GkuBRWuci8ODLlrobQuUzI95Q44SBLWfiN:WGkq0Y8OD5robQ+5Qw

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

booksports64.linkpc.net:1212

Mutex

204b410be8c12856e39ff90b80a8b98b

Attributes
  • reg_key

    204b410be8c12856e39ff90b80a8b98b

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22c5be8c1c5be0029fd1979d4032e177
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections