General
-
Target
d0b1cdcb4c57cb695259d935e45b2c09.bin
-
Size
43KB
-
MD5
d0b1cdcb4c57cb695259d935e45b2c09
-
SHA1
a973d0c8b3b3093ec9f2f6bea1c608af0f9d7d13
-
SHA256
987eb26aac5bb33884022d27ecc5b5444d763c74407931a59dbd6634556ff152
-
SHA512
edf568ce400714b21c0bd5ae2daba51be1edbce68cec9be2eef0dcd533161e587a77746de473dc67505aba6066e683343b7db89be18a6c5482ff496b2ba6c9e6
-
SSDEEP
384:RZyM6FIB+oyiR9blSMuETavIuZzQIij+ZsNO3PlpJKkkjh/TzF7pWn1/greT0pqD:Dm+IliR1lTkHuXQ/oY/+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
20.ip.gl.ply.gg:30481
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d0b1cdcb4c57cb695259d935e45b2c09.bin
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections