General

  • Target

    Client.exe

  • Size

    31KB

  • MD5

    3ee21a127a9f6b00147bfdb1cce13e63

  • SHA1

    5dc8b429a01e8fb8549e86a43f8ebaf9b4b1dd4b

  • SHA256

    b295b302f148bef18981fa4a06bcd6ca77bcfea481992ea597e31dd22e7f9f1f

  • SHA512

    2053f20e4d5771df8ce3c213e9ee393a44f77bb863ff84d2055a3e02acdf1ebdcb08de05108d5307b09e05699a362b9f5a64f513fab3bb7bb520f3d1e7b11b41

  • SSDEEP

    768:kKfFtStrFZczxX6aiALG39Vf1vyUUQmIDUu0tixXj:zyqp4VpvUQVkcj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

answers-crisis.gl.at.ply.gg:1177

Mutex

0d48727c85bda88f4afbd5dd52e16b1d

Attributes
  • reg_key

    0d48727c85bda88f4afbd5dd52e16b1d

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections