General

  • Target

    e76ea7b90a900ed00f982ceeff3e6b1f08956f08f8e00daf59c140f51d0deb2c.exe

  • Size

    43KB

  • MD5

    022acabaf8af0e28844b01f4929ee95c

  • SHA1

    b0096d8c5d45cb7e9e0b3df0b5be5c92669530dc

  • SHA256

    e76ea7b90a900ed00f982ceeff3e6b1f08956f08f8e00daf59c140f51d0deb2c

  • SHA512

    0f474f4f144ff33e6f46aa0c3ee8e29595429ce270c5921e46d537ebf20e06d80df5bd5b0d08df756740224d05b77822b50c4fb377744332e07fd5f2af658b26

  • SSDEEP

    384:YZyq6NUst+3gUy6tZFIEEEoHjtJEzQIij+ZsNO3PlpJKkkjh/TzF7pWnI/greT0k:uqwQh6PFtkjGuXQ/oJ3+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

6.tcp.eu.ngrok.io:16992

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e76ea7b90a900ed00f982ceeff3e6b1f08956f08f8e00daf59c140f51d0deb2c.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections