General

  • Target

    2f1cc715d0e5d4e9142be74287e75887ec207a6bc006c0617eef653fae74647c

  • Size

    55KB

  • MD5

    17315d95e80eb36cc51a7d25e4c8b231

  • SHA1

    95006ad8de0a17dc3df6698e195e62b8ee32475e

  • SHA256

    2f1cc715d0e5d4e9142be74287e75887ec207a6bc006c0617eef653fae74647c

  • SHA512

    481a15c46dcf38562aa989f52330e556da90a3ce00190cedb2e00b2a39df5db3bcc3af743060fd8c75933d6ae756aa4bbc176708f36d3b4aa443b4663ca94608

  • SSDEEP

    1536:OnQdIDnrNZtLy9CIDRwsNMDfXExI3pmmm:K6IDnRekIDRwsNMDfXExI3pm

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

great-it.gl.at.ply.gg:11149

Mutex

4d5861675348411506f0e029827092c2

Attributes
  • reg_key

    4d5861675348411506f0e029827092c2

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f1cc715d0e5d4e9142be74287e75887ec207a6bc006c0617eef653fae74647c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections