General

  • Target

    Server.exe

  • Size

    37KB

  • MD5

    de43783b8b13388eb629c7675983def1

  • SHA1

    9d8285f25c0e8d2a16fae6cba5d5dfbcf2c1d1f7

  • SHA256

    0837d32cd4aabde333efdfc2695f522c07e505131b3d36cc12618be91a057290

  • SHA512

    1052d7f2a2efb7543b970278f11e0b71410386fb7f8b1322ec14ec5681caf114e4f5ef2e30e1d3975207406559595a51d0e3c496de35a9bef6a3b58a6ca32a43

  • SSDEEP

    384:SgzZxj6ic7ri5Z7JAyk/Y4IvDfZeKQVerAF+rMRTyN/0L+EcoinblneHQM3epzXl:RznHJ7k/Y4IDZbQorM+rMRa8NuTht

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

require-spa.gl.at.ply.gg:29750

Mutex

22a96a36e708412bc80ea4f11f20f4c1

Attributes
  • reg_key

    22a96a36e708412bc80ea4f11f20f4c1

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections