General

  • Target

    6fcfa488c67737f9dd617995bb0d67087feb4f84d6ee1fdd26a8fc1e01931b2a.exe

  • Size

    23KB

  • MD5

    9dfb2d75775a9cad7b1d6dbfede91d32

  • SHA1

    611504ab2631e12c707a37615b5d51cc5522e3c9

  • SHA256

    6fcfa488c67737f9dd617995bb0d67087feb4f84d6ee1fdd26a8fc1e01931b2a

  • SHA512

    e14c892eae262322f27d0b9062292d4d8d87325600d4c06c84c0019d2ba322dacfb922598b68ce905b14086582b2a2c41c08384988e0c12e4a9c60fff483be99

  • SSDEEP

    384:p8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZ2b:KXcwt3tRpcnuH

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:1177

Mutex

677e85d68b5a6191eb381068cc81ae97

Attributes
  • reg_key

    677e85d68b5a6191eb381068cc81ae97

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6fcfa488c67737f9dd617995bb0d67087feb4f84d6ee1fdd26a8fc1e01931b2a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections