General
-
Target
1.exe
-
Size
93KB
-
MD5
2fc1de36bbe4f9c772ad3d91db94ba72
-
SHA1
934a4cc8fa1818c3cb03892a6159ae41241bd920
-
SHA256
d7c44b5426f4861090d5c271a02e7131481180fb4e3e3ea76bb886326f4bc3e1
-
SHA512
c79ed6301715dd9f2fd969ad336b6e4761dd914aac6f9e555293b69f0797a3b54751c254f9d91ab4bdd16820727e9b31e22b74817f1fecabf197c7532784ca99
-
SSDEEP
768:PY365nD9O/pBcxYsbae6GIXb9pDX2t9zPL0OXLeuXxrjEtCdnl2pi1Rz4Rk3VsGj:D5xOx6baIa9ROj00ljEwzGi1dDlDvgS
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
127.0.0.1:5552
Mutex
caa16046a2e1b2b7d7bd81d6b31cbb4b
Attributes
-
reg_key
caa16046a2e1b2b7d7bd81d6b31cbb4b
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections