General

  • Target

    Client.exe

  • Size

    31KB

  • MD5

    2a4886693b72580bc327459b89dac363

  • SHA1

    20ccec81fc5cbe314b059f4c9dd6723ca0abf3ac

  • SHA256

    cd0031e6910db130c96a95d08c3ee1134bedad82a376c8905b8ac68c7150d0c3

  • SHA512

    2498b6dc496dd00bc909a896e08e4c4ad7467213929321e2853abe2c03ca770b5eae90417a19b805bb421e8408b7348766d431390ccd5e6674c9e287adb5cf70

  • SSDEEP

    768:Pdaxirnp7VJMzxn6zQJyRm3dPlvyYQmIDUu0ti4Oj:k0pKakJnQVk6j

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

group-w1ny (1):9999

Mutex

a265c84371f56d29c720630027828b9e

Attributes
  • reg_key

    a265c84371f56d29c720630027828b9e

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections