General

  • Target

    test.exe

  • Size

    37KB

  • MD5

    a01b1742a6fd16667a0aae71cb6636b9

  • SHA1

    1e9e92d2fe26843ad45fc8fe9a656ea68bf57b56

  • SHA256

    01ef01c7d774edd368244257d4294850f2c4f0678b0938c8eee818a3a6ebcaf0

  • SHA512

    fc35d36faaffee6fcaab28cbc0cf37d94bf61cbf228e975e492a866132abc1d85504e140be5113a405e852c0e77d5051272f8eb5bf40059c8a7864fad2efd475

  • SSDEEP

    384:v6l+yw7BeAaXaEiVbzdmB0O4yUvNixgp+Z2v/RYJ/oM6IxrAF+rMRTyN/0L+EcoV:Ccyw79POTUvNZYv64rM+rMRa8NucNt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

89.109.50.181:5552

Mutex

645e0e0eff5d90d73700f74ce4405be5

Attributes
  • reg_key

    645e0e0eff5d90d73700f74ce4405be5

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections