General

  • Target

    1d5f075f58948b35aa40d32ff666b9b0N.exe

  • Size

    21KB

  • MD5

    1d5f075f58948b35aa40d32ff666b9b0

  • SHA1

    83a9c79f3a2d047ca7454738f3fae78ea5441512

  • SHA256

    a83c2db6f68e0fe85ee465e30eed666c7e0fb05fd401c268d86bc686cb2d2121

  • SHA512

    6475825d4892d49073327013eac4fb3a83e18d04e47d7df0823bc27ac664e5f116c510da4d493873814a04562d21fd5061990a56c5ecce42f9b39975a334229b

  • SSDEEP

    384:ssqSefmxpDQcx2cSusSUtL+06jgFACcyMZZjvRmRvR6JZlbw8hqIusZzZlG:zVhL1sSFPyqgRpcnun

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

nvh

C2

127.0.0.1:9999

Mutex

fc4d212ef5e1910e333e973238fb1a9c

Attributes
  • reg_key

    fc4d212ef5e1910e333e973238fb1a9c

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d5f075f58948b35aa40d32ff666b9b0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections