General

  • Target

    Fixer.exe

  • Size

    43KB

  • MD5

    e947d466ee6ac91e0a4b135ab4eef44d

  • SHA1

    eb91b570a8e029ee687eb7d8ddf06dd6c21a36d8

  • SHA256

    602dbf0a589f145df09cd667836acd3ab2100e44793344fd1bb1147d9c3d4343

  • SHA512

    9d7807137a503bd38c21eb129a8838d959b2c5c9c6153a57175af3b8d7b00d9567fbbbf330bf215ce3f54bd01a9a61c6cdbfb94a0e090393774901f015bbd96b

  • SSDEEP

    384:0rZyZ7lwZ28bk8yi6p8lOXBEBxdfZazoIij+ZsNO3PlpJKkkjh/TzF7pWn//gre7:0FmGvbk5ioEEenyuXQ/oC/+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

listing-trackbacks.gl.at.ply.gg:15337

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Fixer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections