General

  • Target

    6f881e1052c12c0f98f059f796602945b01a359c8d6154eb0e731dd6309a5f93.exe

  • Size

    31KB

  • MD5

    68727ada30812394a13441b47a85f70c

  • SHA1

    88df82dfc945d8972e43fa338b40c2a001884e61

  • SHA256

    6f881e1052c12c0f98f059f796602945b01a359c8d6154eb0e731dd6309a5f93

  • SHA512

    6175b203d266e6ab6954cc3237525ba7cafa49235ba88432c031717bbaa5f335174cac916f1525c60ab974182e8c389cbc0c6dfdfba37a8be809b095983b00fd

  • SSDEEP

    768:UrhO5b13hdwzxLy3os0O/dMRvCnQmIDUu0tiFFKj:mcZ6eh6gQVkXj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Test

C2

45.84.199.218:1604

Mutex

6a92a61ab784903efa726baa74e277ab

Attributes
  • reg_key

    6a92a61ab784903efa726baa74e277ab

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f881e1052c12c0f98f059f796602945b01a359c8d6154eb0e731dd6309a5f93.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections