General
-
Target
start.bat
-
Size
93KB
-
MD5
eb12259817bf7f95c42d92cb4407a6e0
-
SHA1
2c138665f5e4ac1c97b6003ecd7850c4a679842d
-
SHA256
c4b379abbc9f203fc3f04a49eee54d85863132d5b3c4c8f39ebbd01da38849b9
-
SHA512
5e37b4714ab321c104d9707f45c08b53d9e11bf0e5548218bc02b3087505af7eb01a5aae09f4550006b25e49f52c8ceefb026e45554676494f16074992490b5d
-
SSDEEP
768:HY3mE7yZnDQMMpAZrGSt6udttXy4slhkGJiXxrjEtCdnl2pi1Rz4Rk3YsGdp9gS7:TE+ZD3rGWNd7yhkhjEwzGi1dDwD9gS
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
2.tcp.eu.ngrok.io:13557
Mutex
1390b5de6f068f3d96db87b4801110ec
Attributes
-
reg_key
1390b5de6f068f3d96db87b4801110ec
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
start.bat
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections