General
-
Target
bc1a3cd18c048cf17dd34ed7f1974e0dde782376747004f2aca231323efe3241
-
Size
31KB
-
MD5
9b4c2ca1f998c1d6fa8f7fa1721cf207
-
SHA1
5f01f93f79ec4824b7f063970b209e2a1df8be5d
-
SHA256
bc1a3cd18c048cf17dd34ed7f1974e0dde782376747004f2aca231323efe3241
-
SHA512
d8a16ed2daa51b6bf204cafbca4fdbadd4ce9bf986a50c9c4ddfa54d3619e4654dbd3ede85b3048361fde863d87d38285f25f813fe4ba8c9cafef847e31b58c0
-
SSDEEP
768:bborDp8pdvXyzx9uFwna/5nW3TvanQmIDUu0tiecj:ww68nQbkQVkWj
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
MyBot
C2
127.0.0.1:6522
Mutex
6e9ac6497fc4975c4672b55f181b4e71
Attributes
-
reg_key
6e9ac6497fc4975c4672b55f181b4e71
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bc1a3cd18c048cf17dd34ed7f1974e0dde782376747004f2aca231323efe3241
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections