General

  • Target

    Modrinth_Installer.exe

  • Size

    93KB

  • MD5

    2cbace9fe745d6b698953a1286eaacc7

  • SHA1

    5f88c8fd69c2457bd37442b7a03b17f4d1964199

  • SHA256

    001b2f473864a2324818c19768fecf53adb6614fb6f9d84360875b48bd0f212b

  • SHA512

    0b0bb670c7acbe594d434efdc5863a3a57da34a75a2cbfe146a18c2ac774f04dcbeff456e810a01464a2570782177e7db0c122fd8b9e55d3dfef260bd2139c2a

  • SSDEEP

    1536:bKy1GkeUqZJO5wNSimjEwzGi1dD5DNgS:bKdUqZJOeAOi1dla

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

id-diesel.gl.at.ply.gg:1488

Mutex

b6b1b2291f1f50065c8c065ee8da54b9

Attributes
  • reg_key

    b6b1b2291f1f50065c8c065ee8da54b9

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Modrinth_Installer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections