General

  • Target

    19d61bbad37e1e793aeb9188c85a8d73f28e44fcf0ca16d39041fbac336be05a

  • Size

    23KB

  • MD5

    26abdbec8f7612db904b6d9cc6da41b0

  • SHA1

    6d4fe6c5c6fa78770e59a69c4067f1407ef0cfca

  • SHA256

    19d61bbad37e1e793aeb9188c85a8d73f28e44fcf0ca16d39041fbac336be05a

  • SHA512

    565863a9bf99f1ac80f74bc8eec332cb1076d825c7b86f7719b8022fceaf011c1a00d5b1dc3f1fcaa71e0840bbea08ce1a6efb232a5c053ac4e90dd20fe5a410

  • SSDEEP

    384:T8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZ8k0:4Xcwt3tRpcnuJF

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

279f6960ed84a752570aca7fb2dc1552

Attributes
  • reg_key

    279f6960ed84a752570aca7fb2dc1552

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 19d61bbad37e1e793aeb9188c85a8d73f28e44fcf0ca16d39041fbac336be05a
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections