General

  • Target

    Client.exe

  • Size

    31KB

  • MD5

    b5ede1fdbe0f1b4f5b6eab52a5bccd6a

  • SHA1

    1c6999c9161313999bafa75abd6ea8d1d163734b

  • SHA256

    f7229b9ea27b68a8e44c972d04f3ba62a97a87f1e9e2f1a31598816ea0520cb4

  • SHA512

    2044da627fbf08129a34d24e3c120fed05c145b0b0a06f0da7f799aa2699235cae2bdcebeaac5f9af6e44beeb29c4af064e75117dac51bdb45bf798c8a7f47ad

  • SSDEEP

    768:ZJaxirnp7VJMzxn6zQJyRm3dPlvyYQmIDUu0tiSDj:G0pKakJnQVk9j

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

147.185.221.21:6732

Mutex

32f99f7df66a63200087b87571ab9cfd

Attributes
  • reg_key

    32f99f7df66a63200087b87571ab9cfd

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections