General

  • Target

    Client.exe

  • Size

    31KB

  • MD5

    384d765a386b2d945a770305866b5cce

  • SHA1

    cc7be18fd46d372cfa529acbb245b1d940c6face

  • SHA256

    80f81cf1c148125168db4dad6578bc33c9fdc8ea205355dbd006bea95a6ccf81

  • SHA512

    a05b8778fb968714159f3e24c7505acc6a61fd9c7821ed96924e8f6dd371f1a0f539e0a2c56f8b13a1d6d3dbd225e5ae4ffc7cfbe4527194d6a6e56ae40f4d11

  • SSDEEP

    768:zJaxirnp7VJMzxn6zQJyRm3dPlvyYQmIDUu0tiSgj:c0pKakJnQVkKj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

147.185.221.21:6732

Mutex

32f99f7df66a63200087b87571ab9cfd

Attributes
  • reg_key

    32f99f7df66a63200087b87571ab9cfd

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections