General
-
Target
test.exe
-
Size
93KB
-
MD5
3cdc7e8854e9a63d59b9d53393feef90
-
SHA1
16041acdf5fdd48fd5fd0f32d03210a04a715ed7
-
SHA256
2973d1981bcc25e0efd1ba9330d18c180a77d9ceedc060863750dae6f8dc59b9
-
SHA512
03a69df620ed48d4412cbcf608337609884ebd70e75aecd1a2817316da2cc8a450170c5f6ee9826ffab4af1d5fe28f528e2f73e1a83632851d04f0c09e149c8f
-
SSDEEP
768:FY3fxmh1l8AGaydlWpR4qvZqTn1LX7sfHotSvAU8STiXtFXZfqolLDwtXxrjEtCk:ExmZ8Px+Ho5FXjtLkjEwzGi1dDsDLgS
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
Hacked
C2
hakim32.ddns.net:2000
Mutex
c9129f8996ed99502c3eda702f87bd14
Attributes
-
reg_key
c9129f8996ed99502c3eda702f87bd14
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
test.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections