General

  • Target

    3eff5c6e1c6391488a4ed985fb2eb44c.exe

  • Size

    55KB

  • MD5

    3eff5c6e1c6391488a4ed985fb2eb44c

  • SHA1

    3b4a4dc49dff3e5aac1a7d7b2f288c800e9a65f5

  • SHA256

    28335d3be92246bb9d11c3bbeed55af53a15bb3dbd187ca7abb7acc815bcbe4a

  • SHA512

    a3054620e0d60c6024bcc67ab5ba62b3b3cbeb17f7a503a4e0d48923c9e5029638a3556a2500bafa998bdccada45c88cc2431933faba1f1efec0fb76283e87bc

  • SSDEEP

    1536:eRr8DnjNxaVCae+DAwsNMDeXExI3pmpm:28Dn68X+DAwsNMDeXExI3pm

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

FlagTest

C2

away-displays.gl.at.ply.gg:26916

Mutex

f9f7689fa95bfcdb2882ef61b16dda21

Attributes
  • reg_key

    f9f7689fa95bfcdb2882ef61b16dda21

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3eff5c6e1c6391488a4ed985fb2eb44c.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections