General
-
Target
3e26bf39bf5892ac8aaac3eb4d87f180_NeikiAnalytics.exe
-
Size
36KB
-
MD5
3e26bf39bf5892ac8aaac3eb4d87f180
-
SHA1
6d4307ffdd98a71916538527e80cd81d20bef6dc
-
SHA256
8dccad952d5d31fc1ecfca8e8ee8d3d8fcb9f722b775e6714fff44e5dd4be9d4
-
SHA512
dd07cf1b96207c1a52984c13ff5fa826cea420da2107e82fd5b3a7cb9e7f581927c1265d4341d4c367c98584b9a3ae9f576054bf8b647ee782a0a4c413b01a70
-
SSDEEP
384:1yBmUiDpblmJEpRGyEfPFv9ukCYyW0RrAF+rMRTyN/0L+EcoinblneHQM3epzXtX:QBaHpR9EfPFQkCFW8rM+rMRa8Nuzowt
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
driver.exe
C2
37.192.58.87:5553
Mutex
1d0ed7c009fad1d04543fd719d21fad1
Attributes
-
reg_key
1d0ed7c009fad1d04543fd719d21fad1
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3e26bf39bf5892ac8aaac3eb4d87f180_NeikiAnalytics.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections