General
-
Target
Injector.exe
-
Size
93KB
-
MD5
bd45c907421396fa914641d4d26179d5
-
SHA1
4d8013ba4f5342cf455c9fe6709781bdf7143d2b
-
SHA256
a4d72894bf90943569c0ab62210bc054607568b100619d692f50b382b3d1fed7
-
SHA512
9fd038905fce2525c49c1058d6007dd8b642230b7058d203da631a4347d80cfb561282868bbd16eeb0057e141adf9e8e961682c8e360d569e5e1f133fbbdb16a
-
SSDEEP
768:oY3OI530YTXspgM0m2zGjpyDtdXWuDtXYLWhyXxrjEtCdnl2pi1Rz4Rk3JsGdpG3:eIZ0AA0mT1mrWnL5jEwzGi1dD5DGgS
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
Erbaev
C2
hakim32.ddns.net:2000
0.tcp.eu.ngrok.io:14213
Mutex
2d3aded0997fb346939f78a0d72a06f5
Attributes
-
reg_key
2d3aded0997fb346939f78a0d72a06f5
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Injector.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections