General

  • Target

    7e339008a64dc8651d9dcd6d87aa0273

  • Size

    230KB

  • MD5

    7e339008a64dc8651d9dcd6d87aa0273

  • SHA1

    7396c618a2de48c88d1873792a4e4216050a76e4

  • SHA256

    7cf47a69cd57c64cf081828248127f1a600833e1b68434065fd81ecab882c0a6

  • SHA512

    fe1bc91cc353d43a385c1cfdf8466d1a88200ca1a3a90a62632bcbc7e05be70e6fe0fa9cbc3b52d94072781d3f67526b20113979f0f65f15758ddea92d8e4abb

  • SSDEEP

    1536:4/gDBnYi9bp1BZV0CbD/csM+XNwuLX5sGeUVBy/8q+1UGuJbMUPC:44ZYi9bp1BZV0C3csVXqkp7I/85UGuCB

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

79.224.89.201:5552

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e339008a64dc8651d9dcd6d87aa0273
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections