General

  • Target

    c713265c4ef0841bb39d1a64efe21750N

  • Size

    93KB

  • MD5

    c713265c4ef0841bb39d1a64efe21750

  • SHA1

    a3fd5ad5a2d73e70178b9d606cca0c9c0a1cbe57

  • SHA256

    287b7475b355d2296246714d85dbab3b6aea8700834912c5242df06e2a6a5caf

  • SHA512

    3cdd65a96135ba4461de68c81659d3bf8ae12538df27894e7507e589dcc28a672928633697c2fa56e897e3970b12ee87e26b9a88cc03d58f4f1147701660ae69

  • SSDEEP

    768:4Y33upDIO/pBcxYsbae6GIXb9pDX2b98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3IsGq:3uuOx6baIa9RPj00ljEwzGi1dDAD0gS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

127.0.0.1:7777

Mutex

661768cbf1f24080052b03fdb09aec9d

Attributes
  • reg_key

    661768cbf1f24080052b03fdb09aec9d

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c713265c4ef0841bb39d1a64efe21750N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections