General

  • Target

    New Client2.exe

  • Size

    65KB

  • MD5

    daa3ed0d2b63b19e7b857f6e8bbacaf5

  • SHA1

    b37bb4519f38ebd2022374738433788e92eb761b

  • SHA256

    955dd7bfcce8fc6435f75bf1f5f2929ae770c2997ea83a58f0d6b6ebc5da1556

  • SHA512

    099a4fa7f4732173508544e4eaa39e7719de6c86005d3fbd35ab4532cca554cc300b7fe7f6972a29c159fb9c51e64bdb60040ed76eebe4389a801ee9daacbc7c

  • SSDEEP

    1536:d5SijBgKoN36t9QviFw12W9nhZlMBnvbpfLteF3nLrB9z3n/aF9bLS9vM:d5SijBgKoN36t9QviFCF9nhZaBnNfWlu

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:6522

Mutex

Java Updater Server.exe

Attributes
  • reg_key

    Java Updater Server.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections