General

  • Target

    555555555555555555555555555.exe

  • Size

    31KB

  • MD5

    fe6f894736afcbaaa70712986819dd63

  • SHA1

    420b0ef62191359231cf5e07c24fa2774e8ae121

  • SHA256

    48bc9497ff9b6e89c49c58196375fea257d99fbff312a449ad9cd0d25e16a311

  • SHA512

    9e8ee88d0f27d6c220a296935158735d1a540c0510332d0a294709cde1c2b2161e9109232350e6933d1096b42af4a24d842a59545e92c6d43448e863c3c53f6a

  • SSDEEP

    768:JrMXBwpJbb2zxxO5gaqn5isfvy4QmIDUu0tikqj:+kKJisLQVkGj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

1

C2

talkh.ddns.net:4444

Mutex

cf4d648acaef80f615dcce168ffc92e1

Attributes
  • reg_key

    cf4d648acaef80f615dcce168ffc92e1

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 555555555555555555555555555.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections