General

  • Target

    e28411fbf6917c9c494b98bae922ce80d7c2b6faab726d54bc3f200dd06ae092

  • Size

    23KB

  • MD5

    45ff303662d84f92b764a1fb576867f4

  • SHA1

    4677b95effa9cfa7517d29abdd9880cbee097ca7

  • SHA256

    e28411fbf6917c9c494b98bae922ce80d7c2b6faab726d54bc3f200dd06ae092

  • SHA512

    a1df4b1cd3fb9f5cb1153a50800bfe67f10510ac1342240f30b14d70df1fc57bb873b016ba2e34e8e914f631a92958c71567f2cfe585fcf9de4490dde06ed3f0

  • SSDEEP

    384:aYmdk8XvCJrQLdRGSiEYF7Y65gPyx6BDXNRmRvR6JZlbw8hqIusZzZYV:NwWkti/aeRpcnuL

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

14 mai generateur xbox

C2

89.94.35.57:1604

Mutex

ef05e501c2e286164abf5fcaa961559f

Attributes
  • reg_key

    ef05e501c2e286164abf5fcaa961559f

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e28411fbf6917c9c494b98bae922ce80d7c2b6faab726d54bc3f200dd06ae092
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections