General

  • Target

    New Client.exe

  • Size

    65KB

  • MD5

    3da82d3cf1f35c973a5bcc90c1417dbb

  • SHA1

    ee0a32395eaa39ff385c321fad5a2a47cbf484f6

  • SHA256

    cec1a4b545a0be343ffd47865f9807f91ff8509b7fb06c985887ecaf90106b24

  • SHA512

    84e42fa4f8981ab10e08273ed985d711ef97010af7520026e290fc1cba3e79789488d399b1f0b65e4bfa0bd0a0528d6299ba95bf62e773d254e4fc506003275a

  • SSDEEP

    1536:RKqKkTm4BoN36t4QviFw1ijtkBnvAcfLteF3nLrB9z3nYaF9baS9vM:RKqKkC4BoN36t4QviFCyKBn/fWl9zIai

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:9426

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections