General

  • Target

    fb3d0a73e722cf963be89f75616569e7a5bf49ff6bd318cfe50ec01d14d3b51e

  • Size

    37KB

  • MD5

    c3ec53191dcd0ac94d4e8b7214478f9a

  • SHA1

    cdeb94b327f7b633d4f7f1ddcde822cafdcaf98f

  • SHA256

    fb3d0a73e722cf963be89f75616569e7a5bf49ff6bd318cfe50ec01d14d3b51e

  • SHA512

    02cea1b8b3e4ac2c536b2916e61044c28336add34454257aae4a77bc989cf9bd51652b5063a7108fd028cb3c36cca99886a2211d43d65a6ef482446833c59bbf

  • SSDEEP

    768:MA0ioEohT1CFU7NuKbMgrM+rMRa8Nu2wt:6h1CKhuK47+gRJNx

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

f0a6600178245693ea06ee12fdb153c4

Attributes
  • reg_key

    f0a6600178245693ea06ee12fdb153c4

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb3d0a73e722cf963be89f75616569e7a5bf49ff6bd318cfe50ec01d14d3b51e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections