General

  • Target

    5e07420af030f60aaa585125ee30d12f.exe

  • Size

    93KB

  • MD5

    5e07420af030f60aaa585125ee30d12f

  • SHA1

    7d9730f1e72bf2b7a6ef84886e2444e0aca30d1d

  • SHA256

    a689b16dd9bfa6277ec62d9d0767b91326b3912066934a95c95f0a4ed0f57960

  • SHA512

    0216b0b2a3a070b15f87fd9c2cdebf64148b5098cc75698de893aa8043b706f6be4494515eecabb9548e34b685b0c47036b7cac965a7e06e17a81835d201c276

  • SSDEEP

    1536:5UuYW6qbkW8aVpO1iRkoojEwzGi1dDLDTgS:5UW8aVpOwSCi1dDM

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBoT

C2

hakim32.ddns.net:2000

0.tcp.eu.ngrok.io:15683

Mutex

1a38da36594cb56d811034357f167e9d

Attributes
  • reg_key

    1a38da36594cb56d811034357f167e9d

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e07420af030f60aaa585125ee30d12f.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections