General
-
Target
RatByRolixPc.exe
-
Size
93KB
-
MD5
3b0dae77d2ead4ba77ba996663a3874b
-
SHA1
c745c8b9e7aa9b08defc1d72c6d53d2ee784849e
-
SHA256
3a52c442242073a8b36985371a78027621c35bff818cd87d632f8cb2e453221b
-
SHA512
8f226face24869b3e30abac680a10b46f1171a3114fa8f4b90e488833b51a92a35ea6eec95809e9b3dfc5ac5fd12c9659bff0de3df197f75d0e01526318bba17
-
SSDEEP
768:1Y3QYyD9O/pBcxYsbae6GIXb9pDX2t9zPL0OXLeuXxrjEtCdnl2pi1Rz4Rk3zsGd:3YIOx6baIa9ROj00ljEwzGi1dD/DJgS
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
127.0.0.1:6636
Mutex
e82e63276a0bcc17f29d1705942b53fa
Attributes
-
reg_key
e82e63276a0bcc17f29d1705942b53fa
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
RatByRolixPc.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections