General

  • Target

    253d2bc02e9a0b835ce9c7bf6f05bc9fa33bc60ddfb71f1da3de26befa103894.exe

  • Size

    43KB

  • MD5

    fa730ba7926d985677d9d33d0f714509

  • SHA1

    3c0396c78d4b50a147522f9a64eef0387874215e

  • SHA256

    253d2bc02e9a0b835ce9c7bf6f05bc9fa33bc60ddfb71f1da3de26befa103894

  • SHA512

    efb111e8fcb31e7609219bf5c5ae4ba9ec467cdb9f6f539ee1bc5bc91493adce9ee57f7f8a24e77fa29abbd991fd32355f9d6a367bee3fa2396c4c3a8bfe4e57

  • SSDEEP

    384:QZyVcVarEvEyeZ00s/Y0XMtZtQF8u9D9O5UE5QzwBlpJNakkjh/TzF7pWnN1gre3:WOcMYvReZ1s/tSZaWvQO+kD+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKeD

C2

85:85

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 253d2bc02e9a0b835ce9c7bf6f05bc9fa33bc60ddfb71f1da3de26befa103894.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections