General

  • Target

    1260cbc1068f15c33569a53f8f1c8180_NeikiAnalytics

  • Size

    23KB

  • MD5

    1260cbc1068f15c33569a53f8f1c8180

  • SHA1

    7325a3869c1721a2113176939e6dfe71187a7649

  • SHA256

    9c35f1687b3dbbf9e6b690712bee5ccc9c6f19d0976213d8f0448ef8750bc82c

  • SHA512

    4a0bac65c62c09c07d3f837cd702e64ab4cb46fc0782e79ac9143aa2a04e7facccb693042c9468772a68b96f427fb86cf5f2e53d33b39f8805eaeff1d8843227

  • SSDEEP

    384:QY324bcgPiJLQrfARGSRUJsbY6ZgvSMBD3t8mRvR6JZlbw8hqIusZzZFSX:/L2s+tRyRpcnux

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

xsol.zapto.org:5552

Mutex

4873ae20bd0989912f5ae62d0607a388

Attributes
  • reg_key

    4873ae20bd0989912f5ae62d0607a388

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1260cbc1068f15c33569a53f8f1c8180_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections