General

  • Target

    116d9ccab0f891e59fcfcaef9f2f7252a482e6bd29e3e88c7409f39c5a4e3b5a.exe

  • Size

    37KB

  • MD5

    8efaf268617a984146ce937e3393878a

  • SHA1

    3a736037010a643e7a0d1834b06ef1b2b73d0c4f

  • SHA256

    116d9ccab0f891e59fcfcaef9f2f7252a482e6bd29e3e88c7409f39c5a4e3b5a

  • SHA512

    2ce0e8907c587063cb271fa36d1b1b866a1be0fdfd827d1553f84c57cd9657f860d02b4f73f792ea3ecade07d42713b0b03e8bc1addcebcf4a69783414d61252

  • SSDEEP

    384:hUO23hUidkGXR21cGMy8Pqq53tGFlymkirAF+rMRTyN/0L+EcoinblneHQM3epzi:CO23ZLGv8Pqq58imHrM+rMRa8Nu0dt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

26.200.168.208:5552

Mutex

aee56073cd096714d38258a61b0397bb

Attributes
  • reg_key

    aee56073cd096714d38258a61b0397bb

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 116d9ccab0f891e59fcfcaef9f2f7252a482e6bd29e3e88c7409f39c5a4e3b5a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections