General

  • Target

    36ad87c4c7f6619a827399afe57066c0_NeikiAnalytics.exe

  • Size

    43KB

  • MD5

    36ad87c4c7f6619a827399afe57066c0

  • SHA1

    701df48171ac3a3ecadf1f54baafd6abe05d506f

  • SHA256

    2892240feaaf96c12e1a300ba3383cf5ea98db66f537ead79bc329b3f91d0268

  • SHA512

    627ca73a0afbfd44812e9e79c3cdd4206dbbeb6289b37f3e9f2dc4cf89c174684d1ede6fe82afde59d637feb02fad60169e375e6c276728797a735158ae807c9

  • SSDEEP

    384:PZyIGQS1mmkuHQUyzvnMPGeIM4ZXdP9fSh9D9O5UE5QzwBlpJNakkjh/TzF7pWn9:xPhSkgwhzfWt8ZB9tvQO+6+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

192.121.102.73:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 36ad87c4c7f6619a827399afe57066c0_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections