General

  • Target

    ebbad2cced66ad406c6a0b9f24d38d9873658de324b9053f94aa165ffb699fd9

  • Size

    32KB

  • MD5

    80c05b1e8fa6cc72d2759563dfa0060d

  • SHA1

    96b2d3988918ec463ec418c8afdc47fc31fad20c

  • SHA256

    ebbad2cced66ad406c6a0b9f24d38d9873658de324b9053f94aa165ffb699fd9

  • SHA512

    b4182ff6993a21c591c36d66b22d94cb7a92d5d412ff50db118c73f5998348145f15244b1cad3ccfe9320c50dc8b01621953a198271a123941ac91390dd2d440

  • SSDEEP

    384:kCbP3tSX6vBq7lazgEu0EQKA2vMZnzTy0WT0tebrOFeqzCH0HH:RS6vBqMzY0ZD2vMZnz4rR0HH

Score
10/10

Malware Config

Extracted

Family

njrat

C2

winup.linkpc.net:3055

Mutex

162e84cb43c9451f8ff

Attributes
  • reg_key

    162e84cb43c9451f8ff

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ebbad2cced66ad406c6a0b9f24d38d9873658de324b9053f94aa165ffb699fd9
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections