General
-
Target
860d460eee71e45b0f371841a3df000a
-
Size
93KB
-
MD5
860d460eee71e45b0f371841a3df000a
-
SHA1
d0231d6b9674a08d7dd133f30f3f664b94d0dcd6
-
SHA256
e5c1eaf188efbdb3c073170c5feace9217d8fbe0136d1d653bde0fd241132007
-
SHA512
50c70a8a188fa158f46db1133570c2a7182838371ea4a2afe36c4af61dbc6350eb2306fab5c0907e806e35ba6a6376d62d566840619dc8ca6f23dff8c7483450
-
SSDEEP
768:5Y31mnD9O/pBcxYsbae6GIXb9pDX2t9zPL0OXLeuXxrjEtCdnl2pi1Rz4Rk36sGU:OmxOx6baIa9ROj00ljEwzGi1dD2DegS
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
127.0.0.1:1605
Mutex
ce05379ba15309f7cafb16f87e52ed8e
Attributes
-
reg_key
ce05379ba15309f7cafb16f87e52ed8e
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
860d460eee71e45b0f371841a3df000a
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections