General

  • Target

    d9db3097dcd7445a081ccbdcb4428d6998b7aeaa7c297efae75451ba63f52c6d

  • Size

    23KB

  • MD5

    9fa15a106d0906deb262a7d9240f377a

  • SHA1

    8bc55924b8d623138b8f95a907b6db7167afb1d5

  • SHA256

    d9db3097dcd7445a081ccbdcb4428d6998b7aeaa7c297efae75451ba63f52c6d

  • SHA512

    1c2767a5b62476a08280a1bb1dbe88289feaf71bfbee8d67f0ae6097cc21a92c9a2d33a78d2734d722d4ac0a7dd0f731d70683894e897b159344875838fd66b3

  • SSDEEP

    384:2Ymdk8XvCJrQLdRGSiEYF7Y65gPyx6BDXNRmRvR6JZlbw8hqIusZzZYV:ZwWkti/aeRpcnuL

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

14 mai generateur xbox

C2

89.94.35.57:1604

Mutex

ef05e501c2e286164abf5fcaa961559f

Attributes
  • reg_key

    ef05e501c2e286164abf5fcaa961559f

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d9db3097dcd7445a081ccbdcb4428d6998b7aeaa7c297efae75451ba63f52c6d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections