General

  • Target

    a92763f22f7cf1683f18472ab69293f9.exe

  • Size

    23KB

  • MD5

    a92763f22f7cf1683f18472ab69293f9

  • SHA1

    dfd4a8a96b255804165d4d1d458cd6ccd5b4d8d9

  • SHA256

    7f70e00cb673f52e3feb31834e2e2c4ad2091a690a56735a1f517c7ebc52a3be

  • SHA512

    181c1b24d6e907352836dbd4d2445e112bf949d76df3827dc477919428f21b017c0bb3f27ebe65b59c3589f2d1706f59fdb7bc444073fcb2c3f32696a5d8b003

  • SSDEEP

    384:f+n2650N3qZbATcjRGC5Eo9D46BgnqUhay1ZmRvR6JZlbw8hqIusZzZxU1:4m+71d5XRpcnuJ1

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

mohmoh002.ddns.net:5552

Mutex

d922c61e0aecad1aa02e873c7d37cf0a

Attributes
  • reg_key

    d922c61e0aecad1aa02e873c7d37cf0a

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a92763f22f7cf1683f18472ab69293f9.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections