General
-
Target
Server.exe
-
Size
93KB
-
MD5
572fc944cc5ef19f9669bf0132c98a93
-
SHA1
0a0fd5642ffffe9508c70809b859764c8996a30c
-
SHA256
ca5b63d40c1089aa689ab2f94536f8c5324eabead6c45d4638c95fd5b4fb5e52
-
SHA512
e1c845e5d781abf327242da0e32ca7cec480bf0913f2d4a21bf4750cd15454987c50b2fa56abb259dd483aa8fec00de64b90a66534f3942bdf5c2af3e601f144
-
SSDEEP
1536:OVpR8lZc+/2HVzvdzDGffvqjEwzGi1dDcHb/gS:OVpKc+/2HVzFzDGn7i1dWY
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
7.tcp.eu.ngrok.io:11619
Mutex
1a03731b40a3b9b5d705cc71f522e1c3
Attributes
-
reg_key
1a03731b40a3b9b5d705cc71f522e1c3
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Server.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections