General

  • Target

    5cc4f99c6cd10641418d477ae8d07796f76577a374f0757b7c797ac098b34fbaN

  • Size

    23KB

  • MD5

    72ef8f275cfd89e04bfa69f8fefafe40

  • SHA1

    c3c1fc5fc6e90c071030e48b9ef1a76f4c1c9c24

  • SHA256

    5cc4f99c6cd10641418d477ae8d07796f76577a374f0757b7c797ac098b34fba

  • SHA512

    c24a62c7c611e71b0ea102333a7db3bafb3782d6a9ce21ba351dc2c247ad66bcc3877297ef9b1689f2004711a3f7116e896581505af8ffcbf0135104a1676b22

  • SSDEEP

    384:C0jeCIYTNQZUuQnJXJeCXlwhPQ6VgDOwBHhdmRvR6JZlbw8hqIusZzZbOJy:93jNAU/ZVX6RpcnuJQ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

individual-katrina.gl.at.ply.gg:26471

Mutex

c99dcd0d75865d22b4542d4ecd22f864

Attributes
  • reg_key

    c99dcd0d75865d22b4542d4ecd22f864

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5cc4f99c6cd10641418d477ae8d07796f76577a374f0757b7c797ac098b34fbaN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections