General

  • Target

    85e910acf1723baab49504dd31b31280N.exe

  • Size

    37KB

  • MD5

    85e910acf1723baab49504dd31b31280

  • SHA1

    3ef4c3fc9f2c290ce0a2fd4a180c9d1082015381

  • SHA256

    6180006b1b8d80c860fff5c275d0cd284162424064fc63f07a8c619e4ba5d687

  • SHA512

    a44719c87d611a66a08728d8e576fd2f889e13d2932f32056c147c21f8ec0bb15fd112eae7308b3877adb7fab3996df8b81ad37503813087366983e31e8652be

  • SSDEEP

    384:VKjoUiFebK7FmpE8QyEfuifpefHCwSrAF+rMRTyN/0L+EcoinblneHQM3epzXLN:ct2n8LEfuiAvCzrM+rMRa8NuxGt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

127.0.0.1:7777

Mutex

0ec733498c58686f48844aa1b4b8409b

Attributes
  • reg_key

    0ec733498c58686f48844aa1b4b8409b

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 85e910acf1723baab49504dd31b31280N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections