General

  • Target

    asdasdasd.exe

  • Size

    78KB

  • MD5

    4046240138352e21d8e3c20787769187

  • SHA1

    7c74bc947812fb33ee8a4780bed766706d19e3a0

  • SHA256

    686c19007200af5ee53bfe0e8aa0e5f3ac64d273a4fd5268d64673c36f973c3e

  • SHA512

    59340bf2e37512697c87829b94c954d76d97a8ec3aa56cdbe7fb85e878e18200ffeec5cec62d9b4e6370e934d96afbacdf2a7f9cca5d5b4f6ca0fcde675f1d20

  • SSDEEP

    1536:Jwe+UwpuDpYS5wpOk3JCK6pFoEDv6fOpd/9nEh9TGEJ9R:wQwpOk5CK64O/9ESEJ9

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Lime

C2

26.213.82.125:12550

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    1234

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • asdasdasd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections