General

  • Target

    25d5940984ba36e29774ff73d0dde3376bf1150707b7816b225641069ca037bc

  • Size

    37KB

  • MD5

    24a6a615dba7a7ca9a14c09258401af7

  • SHA1

    d18c47b65dbc4b2a92fd45cdff2d9195a739f77a

  • SHA256

    25d5940984ba36e29774ff73d0dde3376bf1150707b7816b225641069ca037bc

  • SHA512

    fd08ccdd657a84876c721945d5962e3db8192d0bdb58f948ae2ff490a6b0988b11d13888513b78c67c34cdccc301d823edaa1712f582323ae3424cfd2dc130f0

  • SSDEEP

    384:kznkKwi0j9RX+DsMQ/yszHwPzEsnv0mETrAF+rMRTyN/0L+EcoinblneHQM3epzn:AnkfhMBszHwIkv0LTrM+rMRa8NuYKt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

5.39.43.50:1305

Mutex

0b88b2ad495fe406f0a9befbc2b40524

Attributes
  • reg_key

    0b88b2ad495fe406f0a9befbc2b40524

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 25d5940984ba36e29774ff73d0dde3376bf1150707b7816b225641069ca037bc
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections