General

  • Target

    OPTI_ICBMXRD4wD6PgTA.zip

  • Size

    33KB

  • MD5

    77772f03e963f05bad0001bb24ecf0c7

  • SHA1

    d3313272323f95792bbef4d91addac792f7b8596

  • SHA256

    6e61e64c4193bdfeda6142679af4a31592d4da69d87d9a48ebf2a9737a3e483b

  • SHA512

    20d5c258ae6b800aca4853a7d4ea064e262efe6792b5d810f02ed78fcb447a0b97e8497efb8afbbcbe921e54ea919060fdab1c212e198104c923c144e1a36346

  • SSDEEP

    768:YntUHhlw4ndO9r2dDg1D9TDCn4+ufifDHSq823smKpI03/0PX4L:YtKNdOp2tgHqiqAL

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Windows Errors

C2

hakim32.ddns.net:2000

0.tcp.eu.ngrok.io:15008

Mutex

4e86012798d52df25dd1979b7f14773c

Attributes
  • reg_key

    4e86012798d52df25dd1979b7f14773c

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • OPTI_ICBMXRD4wD6PgTA.zip
    .zip
  • opti + cfg 222.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections