General

  • Target

    87da408c18f5626f99c828bb4fcdeb92

  • Size

    23KB

  • MD5

    87da408c18f5626f99c828bb4fcdeb92

  • SHA1

    adeb2c441f2e6200b04fc5b85e7690dd84d6d27c

  • SHA256

    d3d1118edf7f28eae2d790d020d92cdc5b174df48cb1df300702aaf2ae2af8f9

  • SHA512

    28d172c3b05e1260e1f1f49c8ec42039c93c897ab0c37c87750cdf32a5f6d8ea0a7fac367f9defa11ee44938dbddc10c5eb58954f36d4b11ae9662aee15a39b5

  • SSDEEP

    384:ucqbCK0l4h7o9SVyDGvENuh46/gJkOmMSW38mRvR6JZlbw8hqIusZzZwj:h30py6vhxaRpcnud

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

3.128.107.74:13425

Mutex

0f4869ed48296abf17078150073b362b

Attributes
  • reg_key

    0f4869ed48296abf17078150073b362b

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 87da408c18f5626f99c828bb4fcdeb92
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections