General

  • Target

    Serdddddver.exe

  • Size

    37KB

  • MD5

    4ef6fd7f17387cb16f7e706b37219dfc

  • SHA1

    af01e8a134bc80b0984259c8da814f19b7ad0517

  • SHA256

    fe82c594bd551ebae03f8246b90343d66d18bdbc7df6d2d376f83cfd3888c686

  • SHA512

    40636532ac6726a23af725528a51ab60611100f91ba8c0575b976ae197e31cc51f58a955facd8b96e60ed3a83c4b8a885d689df94de9e1bf2f8bc0b76f4c27d1

  • SSDEEP

    384:leLx1kit8Zf5W9cTYXyc/bBM0izvncnPMIurAF+rMRTyN/0L+EcoinblneHQM3e3:kLxKjjTYic/be0PM/rM+rMRa8Nu5nt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

185.169.100.10:12550

Mutex

31ac0081c83a3c8c485ff87913c30738

Attributes
  • reg_key

    31ac0081c83a3c8c485ff87913c30738

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Serdddddver.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections