General

  • Target

    8f97cc465a7d3a703b23423a610cc5a0N.exe

  • Size

    93KB

  • MD5

    8f97cc465a7d3a703b23423a610cc5a0

  • SHA1

    43f35a8972c6e6b06887f90409b4be83d8a4a741

  • SHA256

    4f24ae38cbba5d706e20312603ebea9e16aa090258fab07984d42d7bd9ba0011

  • SHA512

    f19c42c7489cb59167405eb481e5d96f0387e3245c1beaa562104a9c8e5c1c402211c756fa824bdfc91b6b09e3848578c9c6512db056f20a662111e03d0e8f38

  • SSDEEP

    1536:wx0sx/Ak9R+xASPuaeUjEwzGi1dDcDvgS:wx0sn9R+xA4uzVi1dKI

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Teste

C2

hakim32.ddns.net:2000

teste1231234.ddns.net:5552

Mutex

b3b44528b2d7d904ac6895d32e951133

Attributes
  • reg_key

    b3b44528b2d7d904ac6895d32e951133

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f97cc465a7d3a703b23423a610cc5a0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections