General

  • Target

    New Client.exe

  • Size

    78KB

  • MD5

    39d4ddc6e1cdb9e8c535bee7763d5a75

  • SHA1

    9532e6273c06cdf3eea88f40e55c013f9dbab767

  • SHA256

    ca81cf340db85ee7e1df84be720a5876568ecda34d3e3dfacb2fd3a93de12755

  • SHA512

    1da23764e757a132f206db81dfb1c3e45498676a316d17cbf30ed223cfeda6322faf956cc806d85ed79daf15ea876baa08dd4552b396da87145a630eb614108c

  • SSDEEP

    1536:VoM+c92uDpgS5wpOk3JCK6pFoMTf6fOpd/9nEh9TGNJkR:uQwpOk5CK6AO/9ESNJk

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Lime

C2

localhost:12550

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    1234

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections