General

  • Target
    jhson333 update.zip
  • Size 33KB
  • Sample240722-rb33es1cja
  • SHA256 e23ed21ed9ff05c93a4d086494c069fd319548304b52f488aac32b381c530014
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7d

Botnet
  • Ericd

C2
  • hakim32.ddns.net:2000

  • 127.0.0.1:10735

Mutex
  • cfc53c27d3963e444e63fd9f4b839460

Attributes
  • reg_key

    cfc53c27d3963e444e63fd9f4b839460

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • jhson333 update.zip
    .zip 33KB
  • jhson333_update.exe
    .exe 93KB

jhson333 update.zip

  • SHA256 e23ed21ed9ff05c93a4d086494c069fd319548304b52f488aac32b381c530014
  • MD5 SHA1 SHA512 SSDEEP