General

  • Target

    551dbc47d0e5865e72a43a545bfff1d0_NEIKI

  • Size

    37KB

  • MD5

    551dbc47d0e5865e72a43a545bfff1d0

  • SHA1

    9c8787f64077990cfc774efa0b259728d0d8f353

  • SHA256

    719f34294024475ea235d2e5ac21c20c97f478454c6771221dc6373f9129e915

  • SHA512

    c82e5fc218db325fa62600f8558af262281d6afdef7dd0e37e65222bab153c062fecfa9e66c92bfa1d4b3158dfd508740621b8a3456f1f2f2c9d2e952e8f8f8d

  • SSDEEP

    384:dKjoUiFebK7FmpE8QyEfuifpefHCwSrAF+rMRTyN/0L+EcoinblneHQM3epzXlMt:Et2n8LEfuiAvCzrM+rMRa8NufMnt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

127.0.0.1:8888

Mutex

d1e68cb4c129ce0050e085abeea9ca03

Attributes
  • reg_key

    d1e68cb4c129ce0050e085abeea9ca03

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 551dbc47d0e5865e72a43a545bfff1d0_NEIKI
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections