General

  • Target

    9940bdc8730751af8177e0efced0099dbcb862697a6f547c55ed1503b1f465de.exe

  • Size

    43KB

  • MD5

    3a9fab833eb91adf2e1b68354df3a2da

  • SHA1

    d1da413a2edbab1a1278b4936994a2d5c77059ec

  • SHA256

    9940bdc8730751af8177e0efced0099dbcb862697a6f547c55ed1503b1f465de

  • SHA512

    adaed0935dd710952efa9bc918882b252e269ba80fe861285869ea4ff9b4f5cd3d3e0711cc8a342241646193de9a17fda207867132bf0f582f2fac514308fb67

  • SSDEEP

    384:p8ZyqQt3VarE8yTH/fq5WKOEnsDay0+TzEIij+ZsNO3PlpJKkkjh/TzF7pWn8/gm:p6963MY5Tffq5hGDFuXQ/o93+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:19473

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9940bdc8730751af8177e0efced0099dbcb862697a6f547c55ed1503b1f465de.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections