General

  • Target

    Server.rar

  • Size

    17KB

  • MD5

    e2f42e6ced2cf8096849f842cfca6f84

  • SHA1

    4b9f8bc73f23371561cd33728a4afd9f045c8afb

  • SHA256

    6586e2cc6f5a8d15e79dfcdbf76d56917cf49370397d05647db19f5e58e601fa

  • SHA512

    d78e2ce38bb4640854429fb20c8c5181e22a33a416d3417f69f112363399f350088ac5ca356539324cfb93f5dd33eb90843284b07ef0147149ea88553e6260fa

  • SSDEEP

    384:op8eCopmONIy4jIkSbTPxnHFa0RiUTxmaYcWxDxYwV3JruiVM:M8do3CycqTZHFjzTxtYc+BNJrul

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

123

C2

0.tcp.eu.ngrok.io:18924

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.rar
    .rar

    Password: 1

  • Server.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections