General

  • Target

    Server3.exe

  • Size

    37KB

  • MD5

    9572900a67ed67c643c7298b951d2104

  • SHA1

    e3b7291e39cafe608ffbeadba8135658d22dde2f

  • SHA256

    b9418ffff1fdc91b3257ef2c42e6edc1605b38f2534e93c4f487a72f98279496

  • SHA512

    07a115cfb2d5a97f06a10740c1e0f5ef9fb13bb248e6fbf1d7a815fe7139d7d499d4dfc638fe6544012bfa27b324535487b8446234edd4480e0b0446f8f22173

  • SSDEEP

    384:rkc6ikDRxdDsyNyyszPIRPr28msD+rAF+rMRTyN/0L+EcoinblneHQM3epzXoNC/:ADeyNBszPIRy1sqrM+rMRa8NuKgt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

AbuSharaf

C2

every-unnecessary.gl.at.ply.gg:41021

Mutex

bcf19f19ec90f55db9d548f83598227f

Attributes
  • reg_key

    bcf19f19ec90f55db9d548f83598227f

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections