General

  • Target

    ك.exe

  • Size

    54KB

  • MD5

    d997e4ead4eb03c5bdb90e9db10fc73f

  • SHA1

    3ea54605edb6ba11bd9254c68b294cb3987e7f5f

  • SHA256

    fa88baeea59268159197e4da2388dbb19c3191effcc494493680573a12564376

  • SHA512

    7d6ec8c2f2a9ab02d2ecc77cdfdd45914d08650799d67a713136e8f373c69c9ace1524be0cbfc60fde4833b6c20e2dafa7244300c1a440784130fc695ac11b82

  • SSDEEP

    1536:XxUMsDnKNgpynpGSDLwsNMDJXExI3pm8m:HsDn1on4SDLwsNMDJXExI3pm

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

commission-machines.gl.at.ply.gg:6643

Mutex

9ead8d00031ca4c063840f0867d0d183

Attributes
  • reg_key

    9ead8d00031ca4c063840f0867d0d183

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ك.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections