General

  • Target

    5def1d7e7e5971fd7f472abd70a8dfa0_NeikiAnalytics.exe

  • Size

    43KB

  • MD5

    5def1d7e7e5971fd7f472abd70a8dfa0

  • SHA1

    f4c655d62447d7ce0370f28c070387511bee4338

  • SHA256

    dd59a5ca833a7eb86219442eb82913437ae7b89956415971af851c39a1252f61

  • SHA512

    421c8b8fe9b2233143cefe993250bc5cbf4540178df0e28b3b526586c9296cd42cd3fc3956bec427a4445e4324ee5a61102581d9d6dcd1547d9009f8c4d6c2af

  • SSDEEP

    384:HZyQJ61STss7yKS9po7QAGMNZZS2XG9D9O5UE5QzwBlpJNakkjh/TzF7pWnomgrG:5vQk4smKS3ORHZ0ivQO+du+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

18.ip.gl.ply.gg:48354

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5def1d7e7e5971fd7f472abd70a8dfa0_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections