General

  • Target

    Anti root premium 2.1.exe

  • Size

    23KB

  • MD5

    65b16656d680bc649d9bc664f50c1e4c

  • SHA1

    b0f20d682e8db24f7eac65b3bf6a36762138c108

  • SHA256

    040cdeee5065d39d272a9ee07b462bbef8ad1aeb0335c2fd8b9838c1710c7dec

  • SHA512

    97bd1a098719b50c288d13169f41e4958bc8cdc819301451d1c73996459f025d416519f778760733999d3737fa055a642d381f91e8c9a26b125353ff98308047

  • SSDEEP

    384:k0jeCIYTNQZUuQnJXJeCXlwhPQ6VgDOwBHhdmRvR6JZlbw8hqIusZzZJc:b3jNAU/ZVX6Rpcnu5

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

five-sequences.gl.at.ply.gg:47561

Mutex

c7c83ce9909baf9a2983a105aeb7e04b

Attributes
  • reg_key

    c7c83ce9909baf9a2983a105aeb7e04b

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Anti root premium 2.1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections