General

  • Target

    4f60edd6cec063433d6b636f32487812a362affdb6e9af44139587985018756e

  • Size

    38KB

  • MD5

    19f59b5272483912e0edb85ed31b24fd

  • SHA1

    11c5d78c7e74a1af478ef62dfd9751b38bb45ecd

  • SHA256

    4f60edd6cec063433d6b636f32487812a362affdb6e9af44139587985018756e

  • SHA512

    28e6d314656722fe22b44cb77e3e8eada5139c793889a8180b4be8406ec332f0c76eb175376906a8b802a6a13dfee2f2a6f6cc73d1a9812d5f985ad843dcc3bc

  • SSDEEP

    384:oMKFYuEEhERvoBG16Xuy0MHNw6Tg1Y+75JTFmRvR6JZlbw8hqIusZzZGga3A533O:/W4V6+yDRpcnu8a3uxUt+Ddo

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

dsada

C2

aullavideoas.ddns.net:1010

Mutex

4acc7d5a5eb4f0bcb9bb8f90afc33265

Attributes
  • reg_key

    4acc7d5a5eb4f0bcb9bb8f90afc33265

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f60edd6cec063433d6b636f32487812a362affdb6e9af44139587985018756e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections