General
-
Target
1dde43cdcb278b5fe4d8970da4fb31cf.bin
-
Size
93KB
-
MD5
1dde43cdcb278b5fe4d8970da4fb31cf
-
SHA1
98d8bdf90eda8545e6674033932af4443cf072ac
-
SHA256
2ffc5d7602a7c79b149f2dc4fe9d4ae8f1e38bf8ebc5a07029451871e243de10
-
SHA512
f199cce436129133bcdb39aca5ecf393a7fadc0a10bc38978dad94c3a41429299b49973796edeffb8b016182ca1c213ec1f175085c381adaa807190d6287f27a
-
SSDEEP
1536:N+RnEoSnsqS5ut9YDR8SjEwzGi1dDeDVgS:N+tSnsqS5uTYD+7i1dwi
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
85.234.6.210:1337
Mutex
8654a281c9f4fdd6b7fb66d728ad2a41
Attributes
-
reg_key
8654a281c9f4fdd6b7fb66d728ad2a41
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1dde43cdcb278b5fe4d8970da4fb31cf.bin
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections