General
-
Target
aaaa.exe
-
Size
93KB
-
MD5
fb9423a3f21cf7b2b8debf4fb2a6189b
-
SHA1
28b528b7215fcbe851ef626fec9ed0c82d8d2940
-
SHA256
7731c5a2598e18ce7ce45a68732107e91bdc635acd515b02ec7b475dfbde12a7
-
SHA512
9ffe65acb80ce2dd12a2bbcc3145b54100bf245104703d2f284167ad5f703552107e7ce115c505b0d1233ed93e6eff25ff3b013868f560aad9cb8402b4457fbd
-
SSDEEP
768:RY33UnD9O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3LsGh:cUxOx6baIa9RZj00ljEwzGi1dDXDNgS
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
127.0.0.1:5552
Mutex
90cdc4299e3838b5249c33e1c7a2dd25
Attributes
-
reg_key
90cdc4299e3838b5249c33e1c7a2dd25
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
aaaa.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections