General

  • Target

    0x000c000000014682-7.dat

  • Size

    37KB

  • MD5

    cdeeefea69e56aba8bc8fe4f1c15b307

  • SHA1

    61cfe9bd6bd8603189512726829b8f35734066f9

  • SHA256

    c465488bce19dd2326f90383623af75ddc53c85759689533b15eb1745d39a5f5

  • SHA512

    2623803e1457950a3b2774439a08d77d5dc252530465b1c014585bf72c65d444fe84df692bb14b92c407d0013ebdabece488c877c2dc3acb5af39b60d269e297

  • SSDEEP

    384:QIS9MiLdBndznNCyMGmpcaPxzcG2DrhrAF+rMRTyN/0L+EcoinblneHQM3epzXuM:ejRNRMGmp9J123hrM+rMRa8Nuskt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

homepage-allah.gl.at.ply.gg:30710

Mutex

4b5a58d27ce956d0deaa59c0a6172b2c

Attributes
  • reg_key

    4b5a58d27ce956d0deaa59c0a6172b2c

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000c000000014682-7.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections