General

  • Target

    975c2605472ffab2aff0d72e56eb7f17

  • Size

    19KB

  • MD5

    975c2605472ffab2aff0d72e56eb7f17

  • SHA1

    aaf5fba3100c18403e13a1f0c035098fb79c065f

  • SHA256

    98f3a60801a686a468a90d1980078835f07cf79166cc0e6c0312ea4b33c13a23

  • SHA512

    203a949fbb08363bfd8d4d3885b17b51bec4041bab09350a658a80af30d85f9ec5d7b56787a4f9dd51e7f0b390595305a954ac5ac7039b1bd89b97d83f4965c8

  • SSDEEP

    384:ORfbf3DI3OlVmgW14wAWifG5/w9w/9Mlc0/N3MDvbeIa4HQS4:OxDI3Or1W14ZWW9wFaF+mYr

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Zombie

Mutex

selkngpp

Attributes
  • reg_key

    selkngpp

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 975c2605472ffab2aff0d72e56eb7f17
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections