General

  • Target

    10071b7fc8c1800063e60780b8c00b3c0045feecdb92e08ac45cc057127193dc.exe

  • Size

    23KB

  • MD5

    b86e2528a9d9751d2bf3f989cb4268ea

  • SHA1

    5605831e837335df40d011f101179cb9c0484580

  • SHA256

    10071b7fc8c1800063e60780b8c00b3c0045feecdb92e08ac45cc057127193dc

  • SHA512

    45724514526b04540ef9fb8301c97cc968e53440324ba61723845691f3ef6e96a34103d24e41aa39955e5dc3a15fce54126339b5867779cc727c835b17e16d2e

  • SSDEEP

    384:DqMKyOkBkRbohza8yuTUt7u06zgV4a5pzomRvR6JZlbw8hqIusZzZHW:B/YI1T0RpcnuZ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

192.168.1.5:666

Mutex

e8b7e12b68af78ab5a48ce21dc298649

Attributes
  • reg_key

    e8b7e12b68af78ab5a48ce21dc298649

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 10071b7fc8c1800063e60780b8c00b3c0045feecdb92e08ac45cc057127193dc.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections