General

  • Target

    27bf4c111c9278252bbe6a601df25d20N

  • Size

    23KB

  • MD5

    27bf4c111c9278252bbe6a601df25d20

  • SHA1

    3fcaf1ccc268897203806499aab83286162c26a3

  • SHA256

    f8dec0f23808281a89b159c36c032fa81ef279fa64cc39c30ad4f3d253cb514a

  • SHA512

    009c8eb45b49457171b8047fcae76916713718b8923689414be4f3287d780e36ec60dfdd04de7e23d1ba4aa64ad9ea06aa6ee7eb10974ad0a5e1d4b5d45074a8

  • SSDEEP

    384:IslUlEvOEJ8xWwYJOMiOBZEdj1567gtwi5HhbQmRvR6JZlbw8hqIusZzZ6A:xeEvwIlLMRpcnug

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.10.10:5552

Mutex

0dc24807523d3cd24b54cd0996e4c49b

Attributes
  • reg_key

    0dc24807523d3cd24b54cd0996e4c49b

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27bf4c111c9278252bbe6a601df25d20N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections