General

  • Target

    1e1161bb471db37a56a7026e1857ed0d1dc6acc9c7b735e0578d81511e3573ccN

  • Size

    23KB

  • MD5

    c71ac0327fa8739a207808cc911cb6c0

  • SHA1

    3e2eb3221cdd7c7785c319d9d48899925770ad6d

  • SHA256

    1e1161bb471db37a56a7026e1857ed0d1dc6acc9c7b735e0578d81511e3573cc

  • SHA512

    b392324ecc403b2b685d8cd6644be58a86ff1888d411e2cb1f3c23b5ce0823c868ef131ad411cd0209e6608c1f3d514155974a3ebab56b3e87b821125bb60b2a

  • SSDEEP

    384:GoWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZI+:57O89p2rRpcnuY

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.1.11:5552

Mutex

7657c14284185fbd3fb108b43c7467ba

Attributes
  • reg_key

    7657c14284185fbd3fb108b43c7467ba

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e1161bb471db37a56a7026e1857ed0d1dc6acc9c7b735e0578d81511e3573ccN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections