General

  • Target

    a458a33e5591c3fd7f7c8ae58d50ce55.bin

  • Size

    33KB

  • MD5

    d61b69369a37ad56f965b83286f9aeea

  • SHA1

    d4334082d57c38a96d39d5086441ec27624dbd54

  • SHA256

    9bf005fb63494359ccae924f4040b7fea1dfab077c49837cd1f2e3a19d914ff4

  • SHA512

    3c45b41dcd3d27c8c583cfe0c6b39be971325644faabfe2a3bdd96c4322ad3cfb3e0ffca732d3bce4983f82626f20920b03366dafe6dd09e3c905b32b75e8d37

  • SSDEEP

    768:4Z8Y7sCKXZpaNRNbWx4i8twpea6cVAqhqA5fQzJa6CMtT:U17sCKXZpaNDNraXiRAZM/P1

Score
10/10

Malware Config

Extracted

Family

njrat

C2

hakim32.ddns.net:2000

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a458a33e5591c3fd7f7c8ae58d50ce55.bin
    .zip

    Password: infected

  • 95e922bc96ec909a9eb80ae3716af0038ee3de24fc22b569c527764bf3be27a1.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections