General

  • Target

    ClickMe.exe

  • Size

    55KB

  • MD5

    1cc07debb81474e7014ba5061e364954

  • SHA1

    f6e3e72279215da5033ce203ae4a1a72cd6cc463

  • SHA256

    a3f8b450b22d78b3b294fdd5c5f67afac07f5e6dcc7d0f94f9c0ee9064daaa2f

  • SHA512

    165c09fb0ee84dd798f908b371a1f90be15ae686b1dfcff6b9b228f568dbefb90d0b1308cf11bda65fc1b100cb0fd93e7031d9bace738ca55947d49a2eccdc0f

  • SSDEEP

    1536:PDYADn8fLN2/SbxRDDcwsNMDRXExI3pmUm:MADnccqbTDDcwsNMDRXExI3pm

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

17.ip.gl.ply.gg:33786

Mutex

9ae2ee61e34bac04d69a8aff7960e10f

Attributes
  • reg_key

    9ae2ee61e34bac04d69a8aff7960e10f

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ClickMe.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections