General

  • Target

    df34a2ba50be02dc265701cb35ba43c2227015fbb2270bf38f64a0f7fc3234bb

  • Size

    23KB

  • MD5

    73f61cc4edec26a5f5cf8784c4892c69

  • SHA1

    585cd0dbca8a312596d14f4d0cb454bd6636e3e1

  • SHA256

    df34a2ba50be02dc265701cb35ba43c2227015fbb2270bf38f64a0f7fc3234bb

  • SHA512

    afa5ab71959425cf7e8536056c1ef46f2c52d4bbdc74b6ce627f87dde6b618e71da969721af48109154b1489df1473e58f9fd8de4998881263afd8a854da8faa

  • SSDEEP

    384:NoWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZIK:y7O89p2rRpcnus

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.1.11:5552

Mutex

7657c14284185fbd3fb108b43c7467ba

Attributes
  • reg_key

    7657c14284185fbd3fb108b43c7467ba

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • df34a2ba50be02dc265701cb35ba43c2227015fbb2270bf38f64a0f7fc3234bb
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections