General

  • Target

    718959ceff3d009722f560d730c523369c9c8042f0ec8ae336a621c6ce56f40c.exe

  • Size

    43KB

  • MD5

    f4b0deb867b755de216d91baa05856ab

  • SHA1

    845f549b4c38c9acad688508e7c45f787c6fdd2d

  • SHA256

    718959ceff3d009722f560d730c523369c9c8042f0ec8ae336a621c6ce56f40c

  • SHA512

    4460ac975e32c221d174209e614e8ba6c4cdb3271eb40dde1b52adb133a65a5b85ccc07ba8e0923a98cc6e9b7a8ba025107128d44e7f01d611d8874f7850657e

  • SSDEEP

    384:0ZyijTYdM9qIyrqALF6Q8MBuwl4D7W9D9O5UE5QzwBlpJNakkjh/TzF7pWnH/grW:C8CwFr1FPxu1jvQO+Sl+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

mcvlan.ddns.net:1177

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 718959ceff3d009722f560d730c523369c9c8042f0ec8ae336a621c6ce56f40c.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections