General

  • Target

    c5046080d6124d3ed0e6728a894eb0b0N

  • Size

    23KB

  • MD5

    c5046080d6124d3ed0e6728a894eb0b0

  • SHA1

    e163565717d7ce1ff1cf17b665e47621292ce1ff

  • SHA256

    d24502d256ffbe5622f52aeaece660c5b3b21437086b137d8db20365ae8c3f15

  • SHA512

    b89aa72e90a8c3b627227352ce4d248e1dea87445927fc566c55faa2fbe71ce14653bb0ebd7e3eed2de13a90b1e49a456b32ef6e1d7081bb30116f2a5578cad9

  • SSDEEP

    384:t8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZa8:lY+sNKqNHnSdRpcnuc

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.1.11:5552

Mutex

7bf175e23b4ba6fa8274a592c16c85ee

Attributes
  • reg_key

    7bf175e23b4ba6fa8274a592c16c85ee

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5046080d6124d3ed0e6728a894eb0b0N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections