General

  • Target

    0406846f16234e81d64d3b6c5e74eb00_NeikiAnalytics.exe

  • Size

    23KB

  • MD5

    0406846f16234e81d64d3b6c5e74eb00

  • SHA1

    68348aed236d1f90ce197022dd484a40358ff16f

  • SHA256

    afb052f7e558c4ef31dd87120f2639eac0b9621388d10db6be9118e3b52b1452

  • SHA512

    38dedf3370c2d873c99c35c47949148edbb0ea0466611151afeb219e09cd797510e10d9b34fb09c892cdd4a1341fe2b41fe51195d20d2c40606b3e538f2f7320

  • SSDEEP

    384:5c6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZzI:re9EJLN/yRpcnuj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

neuf

C2

doddyfire.linkpc.net:10000

Mutex

e1a87040f2026369a233f9ae76301b7b

Attributes
  • reg_key

    e1a87040f2026369a233f9ae76301b7b

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0406846f16234e81d64d3b6c5e74eb00_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections