General
-
Target
3fe8f07445fc0bd04ae2636c3e92f39f
-
Size
43KB
-
MD5
3fe8f07445fc0bd04ae2636c3e92f39f
-
SHA1
6264cdb3bdff2ba7ee201c322e53fe23116c509a
-
SHA256
89d81e971e17fb1a20f76af6cfe016cdaa3ede35c88feacd860c0ea8cbc838e3
-
SHA512
1b3e5439cd288cc4e1b403c4991391ef7d7ea6df0be33f521cf8217ae5b91aafcaaff724e0f802702f8797341d30f4f61e1b31dd479f4e88ab0ce3c4838e7757
-
SSDEEP
384:qZy21Cj8syWvHDieKveEXMsJEAflz8Iij+ZsNO3PlpJKkkjh/TzF7pWnmigreT0I:oB04pWfDi5dMsj/uXQ/of2+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
cheatcsgo
C2
176.222.146.163:4390
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3fe8f07445fc0bd04ae2636c3e92f39f
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections