General
-
Target
d9f2b22eda3441624144b5867d8127cd568653da889a4aac1f8d5e655f8e8691
-
Size
43KB
-
MD5
5f77b2c53a3b561eda6eeb02a213d01e
-
SHA1
97db553bd691c1d868e88a00ac2a38f923ad2ae0
-
SHA256
d9f2b22eda3441624144b5867d8127cd568653da889a4aac1f8d5e655f8e8691
-
SHA512
67ab2df1a139d6b53af0c5977ad637bcb201dca2715fc2d55ed497fed5f6a548dc716f29fb57cb9ef72f1e47f7680c30750e591ac1ea07ec016f802a6aa93578
-
SSDEEP
768:Y5fRtsYZGKbEaG1AUpuzf/uuXQ/omzuC+L:Y5fRtsQbEaG1AUMzf/uuXQQmzuCM
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
these-accommodation.gl.at.ply.gg:39657
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d9f2b22eda3441624144b5867d8127cd568653da889a4aac1f8d5e655f8e8691
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections