General

  • Target

    0ea77f8ba4ca83bfbbc2bc429653a831.exe

  • Size

    65KB

  • MD5

    0ea77f8ba4ca83bfbbc2bc429653a831

  • SHA1

    835c1241aeb2593de39203eed3cb40d9ffdf38ad

  • SHA256

    015c8775ff5e46f8ac053936d1652d82db5c1aaa5a275aa1b957f723e8ec9b23

  • SHA512

    6ca283c3f8eb59898b7ad5cf16e974803436ede94da125286c38092b55cdb0651c0e0bdff19028119e823050a74a5cae80beb986ef2dc0ae8205700a28d18e62

  • SSDEEP

    1536:q6QEsHKoN36tFQviFw11AR5D+BnvbPfLteF3nLrB9z3njaF9bUS9vM:q6QEsqoN36tFQviFCu+BnDfWl9zzaF9I

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:17742

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ea77f8ba4ca83bfbbc2bc429653a831.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections