General

  • Target

    80b7e96fc227f23824e4e964d2eedfb030fb4ca43e356d5602a8f65e838488ca.exe

  • Size

    43KB

  • MD5

    20be24c90426c82034fafecbf1c96147

  • SHA1

    c315c20c97014edd96074b2322461cc3eb324720

  • SHA256

    80b7e96fc227f23824e4e964d2eedfb030fb4ca43e356d5602a8f65e838488ca

  • SHA512

    797dfdbdefa9de5e966499b800a8a31c648207453ce7e1340c99c5feb6522d567db5a36c5de26e66848799abc86aeba9ae21e4b7dc6eb4d327c84c8c74888da2

  • SSDEEP

    384:S8ZyCFgyCEFmVoyblVM38K0EBEzMghwzEIij+ZsNO3PlpJKkkjh/TzF7pWn2/grq:S6TFgyVAVlbb2fOQgQuXQ/oz/+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:10942

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 80b7e96fc227f23824e4e964d2eedfb030fb4ca43e356d5602a8f65e838488ca.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections