General

  • Target

    aece2185bb51693d72cdfd7bc57474dcc659b72bf6a343320783c4c039598b43.exe

  • Size

    23KB

  • MD5

    48ead5dfb2672dc762864453c33bf1dc

  • SHA1

    a9d637fb253bce420226b114c998983976ab9ccc

  • SHA256

    aece2185bb51693d72cdfd7bc57474dcc659b72bf6a343320783c4c039598b43

  • SHA512

    e861f6101df9b7679e212f4b943081ad4e6eee3479a9b6e604de568d88191589c0bc8532b62b1ec4ec1cd2a659bebf5914594fc2f2e9c13e0a0c0c627898ecbf

  • SSDEEP

    384:npMKFYuEEhERvoBG16Xuy0MHNw6Tg1Y+75JTFmRvR6JZlbw8hqIusZzZ6b:nCW4V6+yDRpcnuL

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

jhonjhon4842.ddns.net:1177

Mutex

fecbd0a484c99b705cf7099e6ce11887

Attributes
  • reg_key

    fecbd0a484c99b705cf7099e6ce11887

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aece2185bb51693d72cdfd7bc57474dcc659b72bf6a343320783c4c039598b43.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections