General

  • Target

    Server.zip

  • Size

    37KB

  • MD5

    042940a8e5c665f2fcdb2363e0a0ecb9

  • SHA1

    90bb14951db17325946d761f0e6925dda46e2840

  • SHA256

    15e3f7633e40b1984b8865624bdf8a7993f95af4a544bca2097ec517b406d9d6

  • SHA512

    91240732ae9b685965cac235d3397f4abd60330708679ced82aa619cb2e2d06ebd67961f607a4aec6628e57aaf1996dd0ec20cadec26bfc1406f22d9ebd41407

  • SSDEEP

    384:eS+6WIiejtCVLO309Qmykrt4QdqMjf+vWEWxrAF+rMRTyN/0L+EcoinblneHQM3X:EHdGdkrOGb+eE2rM+rMRa8Nuistk

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

192.168.0.159:5552

Mutex

a07dd6977de8bb7c076e254367e125b2

Attributes
  • reg_key

    a07dd6977de8bb7c076e254367e125b2

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.zip
    .zip
  • Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections