General
-
Target
16f15192c90e9d0cde6ebe450f21319319f144c143c8d6f2677144a193e617e1
-
Size
43KB
-
MD5
012e18e87d698c2fa8036e0f0c2b0392
-
SHA1
faaec0e1230dfba45547c532efdaa2fd5606bdf7
-
SHA256
16f15192c90e9d0cde6ebe450f21319319f144c143c8d6f2677144a193e617e1
-
SHA512
840b5209f3b09cbf308b3835aa9cd7be1132eb14d811cd93c7d64621e928fc0cc90edf14b4bf3780bdfea3afc27f778d6ad8b80a3df0ac24131f4f6f920a1c31
-
SSDEEP
384:oZyz8Bq0lwZmoy7ypUwCwEhxmD0aXzoIij+ZsNO3PlpJKkkjh/TzF7pWn2/greTn:e/NGol7oUr+DjuXQ/oz/+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
127.0.0.1:7856
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
16f15192c90e9d0cde6ebe450f21319319f144c143c8d6f2677144a193e617e1
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections