General

  • Target

    1bee518bb41dcf11db3ebd4e4b0c85484da5758e8e3c4d17c63abc1f8855fbcd.exe

  • Size

    23KB

  • MD5

    f4f265d3adef9c2bea8dec7c53fb2fdd

  • SHA1

    21fd9d211449edb4c39039c20b9a5063dc0e0d85

  • SHA256

    1bee518bb41dcf11db3ebd4e4b0c85484da5758e8e3c4d17c63abc1f8855fbcd

  • SHA512

    2b263e3f1a84fda0ea77fb75988d7f6a5aa57fdaf5e76251ff1f5408f6e199f4cbfcc2232bec6bb9774b1abc45171c998d985054c75d1cf6d7a86ff0a1d617bf

  • SSDEEP

    384:UzerxMCQmreJsg/5ZuSppqwpng6tgL29LCBPZVmRvR6JZlbw8hqIusZzZlZy:/xq71jBLbRpcnuiy

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

ياسمين بنت زينب

C2

manoooo101.ddns.net:1177

Mutex

6860b5a0f36cf90fa5634655f6f48db7

Attributes
  • reg_key

    6860b5a0f36cf90fa5634655f6f48db7

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1bee518bb41dcf11db3ebd4e4b0c85484da5758e8e3c4d17c63abc1f8855fbcd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections