General

  • Target

    New Client.exe

  • Size

    78KB

  • MD5

    1d834405bfff1c3db1fed29fdab024dc

  • SHA1

    95da8a00e0a2af1835183bdc667258c643aaf8f0

  • SHA256

    633b4fc3a5a5779cb412d8142aa5240b6f393d9be9d19b65074f51851ef7fc6d

  • SHA512

    c136ed06fa20fcf8b709bdf7b2fb6f4f187508a9336ca7e1530e940d0efd295151a261e1734e0205782bc4471f700793db4a03609d15b721110951be0e6a15a4

  • SSDEEP

    1536:+tX+6Y9yhU1ZDppS5wpOk3JCK6pFoRXd6fOpd/9nEh9TG8JcR:khU1RQwpOk5CK6DO/9ES8Jc

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Lime

C2

16.ip.gl.ply.gg:57938

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    5375

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections