General

  • Target

    bVeW.exe

  • Size

    78KB

  • MD5

    0e767d7c682ca681606c0a85768814dc

  • SHA1

    fe53099b74045d3d263dfa9ea0d37a08f1b7bff4

  • SHA256

    5a4b33d906d084990e92fb7556609e492b878d2e69edce8eecfa409aeea80498

  • SHA512

    ed1c2913ea527ebd67bbead5e25772ffe3f229ce5c915464687520738bb3f21ac62ecc06b4b2b4c735d2596a6b5c61b52bffff356480125441f91764f7c4af77

  • SSDEEP

    1536:Gtn+F1lyjDpnS5wpOk3JCK6pFozjP6fOpd/9nEh9TGAJtR:wQwpOk5CK6zO/9ESAJt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Lime

C2

fdfdsfdsag.duckdns.org:8030

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    1234

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bVeW.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections