General
-
Target
ahhdaddyServer.exe
-
Size
37KB
-
MD5
b7d80717060187f2e147b028db8cb96d
-
SHA1
45ce47e73a1c1b7eb346cf8300c298236da5053e
-
SHA256
be7f72966ca6ba415bfac32889f448fa5bed9a02632da14f363902ff88fd04c1
-
SHA512
c8ad1ec55c9f0557cc96b739296a2544d2174f6acf33980777e0f7e953443078a6f3a9acfd43e19b0dbf1d16c473a1b306a42d9baf4a88073fc73c6bdc8212a9
-
SSDEEP
384:zE/IiuRjtD+P3V+y0b76netHx0sAbOHZrAF+rMRTyN/0L+EcoinblneHQM3epzXj:IemV10b76netStO5rM+rMRa8NuZFt
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
OwO
C2
artist-composed.gl.at.ply.gg:28632
Mutex
37f622693e6086826fd92b3e7e508134
Attributes
-
reg_key
37f622693e6086826fd92b3e7e508134
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ahhdaddyServer.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections