General

  • Target

    02cefbda3396f784034e71616e52d67e.exe

  • Size

    93KB

  • MD5

    02cefbda3396f784034e71616e52d67e

  • SHA1

    b38666d28beb902565260bf87d4f367911e94eda

  • SHA256

    bb128ec75526887e8ebc2c1e4c0daf7b7ec1d41f039c0fb88e927b90fce6df9e

  • SHA512

    4c17201e33a1c9fc6ff5cb476fe548447cdeeea20f494ea1a77bde704d97de7826b6ec880274fed2071d29499f3df09a8737770557f27d7d3134e16a8e80b92a

  • SSDEEP

    1536:jy+C+xhUa9urgOBPmNvM4jEwzGi1dDVD/gS:jyIUa9urgOkdGi1dhY

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Victim

C2

hakim32.ddns.net:2000

0.tcp.eu.ngrok.io:11348

Mutex

06b22b2a8c6c511de75528741425ba83

Attributes
  • reg_key

    06b22b2a8c6c511de75528741425ba83

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02cefbda3396f784034e71616e52d67e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections