General

  • Target

    inquiry.exe

  • Size

    23KB

  • MD5

    7f951d5d507335348d0a0584c1423b95

  • SHA1

    67929b58141efcfcfb8680245ffc97351a841e98

  • SHA256

    b000721a7b2bc3388f243689b6558b9ed3f02864e8470ebbcaea77bda374d723

  • SHA512

    37992a279961685e3276edb107c4c4468c9052893389c0b84c6de177404cf968eb854a168c555834dd705db8c0c8eceec7b92aa4961f084af1418c1390af8d80

  • SSDEEP

    384:cvMKyOkBkRbohza8yuTUt7u06zgV4a5pzomRvR6JZlbw8hqIusZzZDMG:cE/YI1T0RpcnuQL

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

192.168.56.1:5552

Mutex

bee7db9db259ae446fad6310ce6b34ee

Attributes
  • reg_key

    bee7db9db259ae446fad6310ce6b34ee

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • inquiry.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections