General

  • Target

    af27cf5dcbe7bcc41336c86db566ac60N.exe

  • Size

    26KB

  • MD5

    af27cf5dcbe7bcc41336c86db566ac60

  • SHA1

    2e6f7858b11c04b8ccec18930daa76397b85800e

  • SHA256

    e8269e0709d4d8b28d607f86ab81bcae1de79d0833a34ae6c117e37fd8a37c4d

  • SHA512

    c04b8a85e6f27641c4e676daa9b858a7bdad7389cd734f237abe3ad73c707573bb4efe4cd771d62c8cc15d6fd4bbdac0df6aece9969fe24ac3d56ecc27ccca9a

  • SSDEEP

    384:sL+vALsnneIsrzqxsHVrikPgth5MLAQk93vmhm7UMKmIEecKdbXTzm9bVhcaU6/1:q/aeY6DLA/vMHTi9bD

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v4.0

Botnet

HacKed

C2

127.0.0.1:2222

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af27cf5dcbe7bcc41336c86db566ac60N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections