General

  • Target

    e80e5d7d57dc52dcf1f56b40f53e206a3cc45f6f83cfa2d6b4a917a795366845

  • Size

    23KB

  • MD5

    1b31f5605c12450df3c7e6eb1431c8b9

  • SHA1

    85559db03fbf8b08323067c32bf3916f6e4db2d6

  • SHA256

    e80e5d7d57dc52dcf1f56b40f53e206a3cc45f6f83cfa2d6b4a917a795366845

  • SHA512

    9a0f351661d898a2cdf1fee5309feefd1edaecb16c8a89932a9f978a33354f59b11157c6f306c699128dec463f1780a43d198024060fb4f69a97d3a07c3f2c6a

  • SSDEEP

    384:dslUlEvOEJ8xWwYJOMiOBZEdj1567gtwi5HhbQmRvR6JZlbw8hqIusZzZ6D:OeEvwIlLMRpcnuj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.10.10:5552

Mutex

0dc24807523d3cd24b54cd0996e4c49b

Attributes
  • reg_key

    0dc24807523d3cd24b54cd0996e4c49b

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e80e5d7d57dc52dcf1f56b40f53e206a3cc45f6f83cfa2d6b4a917a795366845
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections