General

  • Target

    green.exe

  • Size

    37KB

  • MD5

    a0b45cd893fbd80f526ce1fb4b30e6ee

  • SHA1

    7c4ec11476604a27ec8edbc294b37f9079ac93b8

  • SHA256

    1c15ba71c177c5e1e0a71781a0e227ea3130a33e1d6bd7b048bc21bf68e33716

  • SHA512

    013775f2aa4374ed9ed13d23d0ebdc10f64e9fd0843a12e1d95d3e115e103d07f6bc483dbefbe5011d37c80dae78cc1a179c37f9f81ec7b09c34c699970c9090

  • SSDEEP

    384:BCCKMizd3jnBhFbJ8ycPj93tRwympwrAF+rMRTyN/0L+EcoinblneHQM3epzXfNx:cCg3lLJfcPj9XNmSrM+rMRa8NuxZt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

home.kanti.pw:30122

Mutex

63eb49409a29a596299379308a2e1470

Attributes
  • reg_key

    63eb49409a29a596299379308a2e1470

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • green.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections