General
-
Target
0675a80b8e031100807181501a809370N.exe
-
Size
43KB
-
MD5
0675a80b8e031100807181501a809370
-
SHA1
5f031a46e544e3608c40ff99d996cfca3db2f30a
-
SHA256
2ee5abf5c207fde7cdc53c14638388041aa5b110432af77d118a252f025c5f9b
-
SHA512
86db747942fb87bc8af1beaefaa067c11ef89592c9368fd442b6fcf6746a74bd1cb0924b055e28bb3af53375728543ce9c25841d4abdfaf806ec03ffa340f2c1
-
SSDEEP
384:HZyqONUst+3gUy6Xf1+W+Ek1tJqzQIij+ZsNO3PlpJKkkjh/TzF7pWnc5FgreT0k:5iwQh6v19i14uXQ/otF+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
test1
C2
57.129.38.230:6969
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0675a80b8e031100807181501a809370N.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections