General

  • Target

    New Client.exe

  • Size

    65KB

  • MD5

    305b9050f305abc3f25370b9e70ad41c

  • SHA1

    5c05d87ee948579cdad40aecc5fb5918c428c4a2

  • SHA256

    3ede10137560c7995f6a0a1b66c0fed309e55973d8ea37969c0921b77a4abfcd

  • SHA512

    5fe14b1b816c67e2b288616b30e367f8f64041564e2abd0f0730fbc7d5fa2f3db5615dda62604b2dfe3c0d9e225d23b19060612f74b149409fab22a57869756d

  • SSDEEP

    1536:LLqKkTm4BoN36t4QviFw1ijtkBnvAcfLteF3nLrB9z3nlaF9bJS9vM:LLqKkC4BoN36t4QviFCyKBn/fWl9zVa9

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:1504

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections