General
-
Target
njRAT-RED-V12.exe
-
Size
27KB
-
MD5
6bafe0541bffb68e63ef17c551258ac6
-
SHA1
804366c8260b1fd73ed84e4a5a65c159aa8def05
-
SHA256
0a2b53b63e489324c13eb75d7543a4e10755ae341522e1e795230c1eeffe8bff
-
SHA512
9d3ef0651f79b590aa8a334daf4bcbba079052b7c38717b3bf0b5e67ebecee91757039d08697c86b197f2518314e5bd2f1a459b8b9c7e12cd3a11b0e08836409
-
SSDEEP
384:ILZxZ3ZfjHnGgk8QgLLwv6mxEP9AOWIMNAQk93vmhm7UMKmIEecKdbXTzm9bVhcF:2931jHGqghNA/vMHTi9bD
Score
10/10
Malware Config
Extracted
Family
njrat
Version
v2.0
Botnet
Windows
C2
language-sublime.gl.at.ply.gg:59424
Mutex
Windows
Attributes
-
reg_key
Windows
-
splitter
|-F-|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
njRAT-RED-V12.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections