General

  • Target

    test1.exe

  • Size

    93KB

  • MD5

    7034f4e9e4f2143d07498351b648e04d

  • SHA1

    f2be5ad2375d0b173c112d26cc69f6331febc22b

  • SHA256

    cbed7ae4365235162babdb58735aabe2a6038ea5987d22f341fde35f812392d2

  • SHA512

    f22538d026daf4aee6bf5541b758de61bb04f061c5b5d473013101a41984641cadb7d138892b090a57c7820e726675b1460edf3801a35618f9518d962f6d030d

  • SSDEEP

    1536:mxPdrvzeKQVfi5X3K1QjEwzGi1dDwDIgS:mxlzeKQVu3K1Bi1dmx

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Hacked

C2

hakim32.ddns.net:2000

tool-seven.gl.at.ply.gg:52445

Mutex

784711e4bbaad644a1c761878f6fff19

Attributes
  • reg_key

    784711e4bbaad644a1c761878f6fff19

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections