General

  • Target

    24e31ad28402a5235d419f8fdaa60c965336e94f7790386bd6c86961739385c9_NeikiAnalytics.exe

  • Size

    43KB

  • MD5

    b8075c102017560be5ceca3cf1db1c30

  • SHA1

    3a4947cced200e19fec1fddd62fa4f232fab2d6e

  • SHA256

    24e31ad28402a5235d419f8fdaa60c965336e94f7790386bd6c86961739385c9

  • SHA512

    265c368fea23beb74c2b7f22f836ef54e76a07e18376571e6e537c6bf1ba77c441dde544ae15a1aac4a14e1d4ca2fdbd71ab1e1a5bb89c86f09a93ed90194250

  • SSDEEP

    384:5ZyYpzld2fS5y+BBiuCJpEv94LqVGVGmbgz4Iij+ZsNO3PlpJKkkjh/TzF7pWn7O:bXloaw+viuG5bSuXQ/o6Hc+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HOI4 Old Russia

C2

professional-chicken.gl.at.ply.gg:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24e31ad28402a5235d419f8fdaa60c965336e94f7790386bd6c86961739385c9_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections