Resubmissions

14/07/2024, 14:26

240714-rrzd6stglk 10

General

  • Target

    install.exe

  • Size

    31KB

  • MD5

    f91d1697f43205fb4089a1adf6f78b11

  • SHA1

    22b6cad064b9cdc34d189c82a510414965128714

  • SHA256

    e0f0bcee6859834eae88ed8615c97f8a7f7538fc9ee03cacf53dbfde45cb64ee

  • SHA512

    ffc8b09f334d0b1a842cd2eba0d4de9a478f588b712a6b066f585e821fe7becc15bff7bd3cd83a01b6de74a89598ca262174d967a48c7f710b34bedad4dee1ec

  • SSDEEP

    768:UFM5TP1/plIzxTCfVYAvN1Zvy/QmIDUu0tiUgj:3b1ay/YQVkcj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

127.0.0.1:6522

Mutex

60c28f2ec9c1d3d7f391e11534af955e

Attributes
  • reg_key

    60c28f2ec9c1d3d7f391e11534af955e

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • install.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections