General

  • Target

    f87f2f4c612bc9e34b8b1d152b2d7b948eacd966.bin

  • Size

    23KB

  • MD5

    953d4e0f9a9ba08c721b4f45a64f04cb

  • SHA1

    f87f2f4c612bc9e34b8b1d152b2d7b948eacd966

  • SHA256

    28db67940cab455eca46e4947d70edf2e04e39f9f037b0aa3a869b61a29ccf5b

  • SHA512

    eb98effbf6e0e2c0773e6263d11ece818d7f661b9c55ce1a682175d18bd3c3fc5d45c91f8eafb5dc2b06b6bd2182155378fe6ff409af0e112b6e12c200805a3a

  • SSDEEP

    384:BoWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZI8:27O89p2rRpcnuG

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.1.11:5552

Mutex

7657c14284185fbd3fb108b43c7467ba

Attributes
  • reg_key

    7657c14284185fbd3fb108b43c7467ba

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f87f2f4c612bc9e34b8b1d152b2d7b948eacd966.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections