General

  • Target

    ab4ad98b85d2f32c38fa1033ab6c5d2a1eed13c96002664e8b967f72fd4e476b

  • Size

    23KB

  • MD5

    2019246f2c897a7e24ee017584b9687d

  • SHA1

    f5f17820c519e7ffcebe8c2d921484b4accdf3d9

  • SHA256

    ab4ad98b85d2f32c38fa1033ab6c5d2a1eed13c96002664e8b967f72fd4e476b

  • SHA512

    e3bc94c010a92c0ae00f173fb5f90208912d3080113621f46075af8c8dcca55f848ff58b591cee682193dc3e8893d6bb45334c126e5d74d2ae829bb783edc388

  • SSDEEP

    384:/oWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZIs:Y7O89p2rRpcnu6

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.1.11:5552

Mutex

7657c14284185fbd3fb108b43c7467ba

Attributes
  • reg_key

    7657c14284185fbd3fb108b43c7467ba

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab4ad98b85d2f32c38fa1033ab6c5d2a1eed13c96002664e8b967f72fd4e476b
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections