General

  • Target

    122e243712261a6f082ceb95f03ac19a.exe

  • Size

    65KB

  • MD5

    122e243712261a6f082ceb95f03ac19a

  • SHA1

    6b5e8e187dca976e830a7c95056ef956cce6b61d

  • SHA256

    79174249fde1fe4f55f92724843cfb41da203f62f6d22c222a4084eeac4852dc

  • SHA512

    03f93fc14b1d419819e2a5af713d834c81695288f41c2d98ab03c9e4a9a31092a70c1f97875fa32446077e3a322f737de956bcd1a5d8ef18a1006c870f1e1480

  • SSDEEP

    1536:iF+u2LoN36tcQviFw12+1IBnvAofLteF3nLrB9z3nuaF9bWS9vM:iF+uIoN36tcQviFCbGBnXfWl9zeaF9bG

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:18377

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 122e243712261a6f082ceb95f03ac19a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections