General

  • Target

    1ee7246f1207bb50922b717e6ed3b50b.exe

  • Size

    43KB

  • MD5

    1ee7246f1207bb50922b717e6ed3b50b

  • SHA1

    03ebb0dad611a0656befcfd612a4e354f9a66294

  • SHA256

    28d2fae36503408b226325b6da83a7befe0ce4ef51853dbb56ee3efe21b05f66

  • SHA512

    1d6bf81c15af99104b05ba61d87a98ba6d4ba37bcb92865866c3cfe176a8924eb928f6e69e8b5ec5d1d19a80554ff7130e7c7099a1dfa13d41f8ba27840b51bd

  • SSDEEP

    384:n8ZySa33VarE8yTNJFqfQYMEnwpai0+dzEIij+ZsNO3PlpJKkkjh/TzF7pWnHmgm:n6xq3MY5TnFqfpMpLuXQ/oCC+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:16904

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ee7246f1207bb50922b717e6ed3b50b.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections