General

  • Target

    40ddc2dfac27ba24503b1b3e70539dce.exe

  • Size

    43KB

  • MD5

    40ddc2dfac27ba24503b1b3e70539dce

  • SHA1

    e62d4dd7ad12c3a9b4dbd6566f9e79bfa007c0d1

  • SHA256

    0b4d8a626297140778de69d812c0e5024a948decd5e35cc5c101e485c2002cf7

  • SHA512

    bde8f7aba4409421749d0fdb793ba33e7c473374af798eaeb9f6889722649590c29eea9fc7a959a2615e8c4451a54627c75796b48dfe32cfd3e599bf3f20711b

  • SSDEEP

    384:fZyqBegJtdsbhKIyK0/KtCLfHtMi7rgd9D9O5UE5QzwBlpJNakkjh/TzF7pWn/c1:hNYgziwFK0itCLv7fvQO+D+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

members-flower.gl.at.ply.gg:10825

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 40ddc2dfac27ba24503b1b3e70539dce.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections