General

  • Target

    source.exe

  • Size

    27KB

  • MD5

    fb77895386ea971e7d5f9eb0567ad48d

  • SHA1

    f4f281ba3b8533a8a2b9af064fd305aad37cd8bd

  • SHA256

    c29c656dcded1b12ba66552518268ee6af632e7de7682997ddc9aa68c9af8b3a

  • SHA512

    f59e6f5d36a55f6b90af84b2f0dfd85bbc5bb8038eae981e5ec9267d1b79f15e8fb359028197371ac3feda9f707939e486458c97109fe2689722254a4a838131

  • SSDEEP

    384:/8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZlGBKk1:kXcwt3tRpcnufB

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

192.168.0.120:5552

Mutex

ff9b9be5532d3c10743458ea329ee01e

Attributes
  • reg_key

    ff9b9be5532d3c10743458ea329ee01e

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • source.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections