General

  • Target

    634b013ec5a941957e0d7c3199143040N.exe

  • Size

    23KB

  • MD5

    634b013ec5a941957e0d7c3199143040

  • SHA1

    664c23113ba8e51c212cfc4b09f8e8a0c5295fdb

  • SHA256

    21b54ed4f8e4fe64be24f09d69ff40f2298fe4c7afd2cfe959375073b34d7a21

  • SHA512

    7e0b0ee2760753fe1a0fc75d8829bc4f18c30bc429b68359b834dc8b42937164ac199eb986be588ad2fb13164d632018d96c31feb0389b5c49e0372c6876c658

  • SSDEEP

    384:/QeCo2zmZbQHkJeCdUwBvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZ6+:g5yBVd7Rpcnuq

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Pro

C2

components-resort.gl.at.ply.gg:9316

Mutex

39a4533d9bd0691bbe9f37148b2fddea

Attributes
  • reg_key

    39a4533d9bd0691bbe9f37148b2fddea

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 634b013ec5a941957e0d7c3199143040N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections