General

  • Target

    b7e8c657ebef15f20a9bdca0ead60c8215cadfc399a61f638b47fbd546199406N

  • Size

    37KB

  • MD5

    13f7e5922511ea4590152c9059cb60e0

  • SHA1

    2be81a268988e73c36e2e37480e448866b0e5f60

  • SHA256

    b7e8c657ebef15f20a9bdca0ead60c8215cadfc399a61f638b47fbd546199406

  • SHA512

    18792f9313a49047311bf9338f2b22bccc131f93e5e42d14d7cfdd7598285b2bdf744d9da5e134a05a67d229d09e438581bcd525e8555f46d3631399b74038c9

  • SSDEEP

    768:E+GAO3nJbk/D6EA/NM6rM+rMRa8NuhxAtN:ZUnJAL7A/Cl+gRJNM

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

zzzzzzzzzzzzzzzzzzzzzzzzzz

C2

147.185.221.22:18677

Mutex

0c3f60d5c8896bb9d7980f824f9a86cf

Attributes
  • reg_key

    0c3f60d5c8896bb9d7980f824f9a86cf

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7e8c657ebef15f20a9bdca0ead60c8215cadfc399a61f638b47fbd546199406N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections