General
-
Target
8b947486ed56599c2fbb60f77d60b3215e5f2dd5cda1fd94dafe5ca4825c217b
-
Size
37KB
-
MD5
5133a39682e9f9c6b6245193d0e71c8a
-
SHA1
fe6e514468854217f86079d3e111815fb52de928
-
SHA256
8b947486ed56599c2fbb60f77d60b3215e5f2dd5cda1fd94dafe5ca4825c217b
-
SHA512
cd8f7320738c9098429e17997643eff7920568e2fe0f6af8f64a087a8baa8311dc977c565cfdff164b30bb31e952f2ced65e7e0cede562af9805b9ee6a9b14e5
-
SSDEEP
384:WkZTUiSmL1G5k2gyk/4sP9S/ksVW0erAF+rMRTyN/0L+EcoinblneHQM3epzXnNP:BZX32bk/4sYssVWbrM+rMRa8Nuprt
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
HacKed
C2
127.0.0.1:6652
Mutex
73e4ea7af59bea49b79c8c5f799f272d
Attributes
-
reg_key
73e4ea7af59bea49b79c8c5f799f272d
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8b947486ed56599c2fbb60f77d60b3215e5f2dd5cda1fd94dafe5ca4825c217b
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections