General

  • Target

    4685803ad19d283ca259f4af5fff5f0c397c0fe0c3032b663d0b99d510c4fcb6.exe

  • Size

    31KB

  • MD5

    200a92ad17110cb3dacc7387b12186c6

  • SHA1

    6bee61858fbf3152f748b3dcdffe0509a8d30a57

  • SHA256

    4685803ad19d283ca259f4af5fff5f0c397c0fe0c3032b663d0b99d510c4fcb6

  • SHA512

    1edf29f9ebce81ce230829637a8ad672f8d389984bb020b43992aacbf47674b8f1e5e8af8d7eee1ae42b03c7334e0ccef175a868704fbb265eb4810cde50b0e7

  • SSDEEP

    768:oJhOBb13hdwzxLy3gcEOvVMRvqfQmIDUu0tiBdj:gUZ6WZ6AQVkuj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

ok

C2

83.196.78.85:8080

Mutex

19447a578b6a3b2cdbc5a3dc3e7f5251

Attributes
  • reg_key

    19447a578b6a3b2cdbc5a3dc3e7f5251

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4685803ad19d283ca259f4af5fff5f0c397c0fe0c3032b663d0b99d510c4fcb6.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections