General

  • Target

    4b19f3492b1dcc10d22351a0e2e08020.exe

  • Size

    37KB

  • MD5

    4b19f3492b1dcc10d22351a0e2e08020

  • SHA1

    150ab0dd10e35734b038dceb71477336563dbb81

  • SHA256

    b7087b4779d76ca804a68f5f73e64a3e94c24fea7a1469f29860b372ca498f92

  • SHA512

    7a06c79b59284b267eb0701de76e386b6c575092e8d95d910412167e558ba3a086d99d5969373bbb394e73020d00eeb5b493387ebf193d4cf90c3c953d84017d

  • SSDEEP

    384:ZlmFnqi0lJZtbH9KyM+2VzmiPZMsWer5rAF+rMRTyN/0L+EcoinblneHQM3epzXU:DmSJ95M+2V6iqVe9rM+rMRa8NuMDt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

born-administrative.gl.at.ply.gg:10324

Mutex

c6aa749155b3480287d64e2d4a50cdbf

Attributes
  • reg_key

    c6aa749155b3480287d64e2d4a50cdbf

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b19f3492b1dcc10d22351a0e2e08020.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections