General

  • Target

    NJrat.exe

  • Size

    43KB

  • MD5

    c0008b6e8521b7e036ebea56ede8a955

  • SHA1

    31bf9a91b6713bae21c09da9470d4256d84a9387

  • SHA256

    7e438e6b6c065feb26c095540b566cd32c474d48f90d013d71c423df618ec00e

  • SHA512

    f11d97a9a4df5680fc8b6fc00a0277a72cffb17a5d08d8fd43bddc134f6d0af71bee6c25024c4b23113aaba336d5b7d4f4e334701d10715534186dc2fb7d4b28

  • SSDEEP

    384:NZyECn1iDcsyEqtBfkEGCAMtGyOEBW9D9O5UE5QzwBlpJNakkjh/TzF7pWn6/grG:n6nU4pEqtNkE5YynvQO+rt+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NJrat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections