General

  • Target

    e632779afa8a535c1c33326cd2ed3c21a2dd3d5978e83670b209bd42778fee4d.exe

  • Size

    31KB

  • MD5

    1b50b5046d3afe4b4ea14f84942e2993

  • SHA1

    c8e369ac663e76f1fd67d3e1c3e880ee0f00dc52

  • SHA256

    e632779afa8a535c1c33326cd2ed3c21a2dd3d5978e83670b209bd42778fee4d

  • SHA512

    503b8075fed09547f7e8b98cf52e48aa4049523e5b95daa81bd934a988d8a78274ad92c54d5dac336baaa1b2d9b615aca49ba9d2e5aa7bb0efdea7524e5245b4

  • SSDEEP

    768:hrhO5b13hdwzxLy3os0O/dMRvCnQmIDUu0tig3j:FcZ6eh6gQVkXj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

1.243.157.185:6522

Mutex

972ed8a7b6cd2761ef033521af1629ed

Attributes
  • reg_key

    972ed8a7b6cd2761ef033521af1629ed

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e632779afa8a535c1c33326cd2ed3c21a2dd3d5978e83670b209bd42778fee4d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections