General

  • Target

    1.exe

  • Size

    23KB

  • MD5

    450224409f58dfa6e3ff72ec43934195

  • SHA1

    45f4013398aae97eed71a3845cf7901e5d510e33

  • SHA256

    ab8c439957396db4adfba871c254ca799ab1a7375631dc630d14dbd4470352b5

  • SHA512

    c470c75e8098603afc54d241388d87b8832df268e3a45879f1f1ceef0aee166caca4927a0b852707151a2bc1d73e9d6261262266ef7ac7c722584bbc7886882a

  • SSDEEP

    384:J8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZ3Fw:RY+sNKqNHnSdRpcnuJ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

lja2536.codns.com:5553

Mutex

d905f418d39000c6604e57a9f433b48c

Attributes
  • reg_key

    d905f418d39000c6604e57a9f433b48c

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections