General
-
Target
mal.bin
-
Size
37KB
-
MD5
1a89a94b9f8b3e9e12009ce905a6afd7
-
SHA1
18bf661911a93377ada5902ebc581e535f798bd3
-
SHA256
f75a78bbb8b9fec7151cda7ddfe71f05a83828a202b7fb3278840491c775212d
-
SHA512
2b6f7138875dcad65761294b43fde006980efeded9264e11c2d8ee5131c61ec6d4d8ef48cdf5b3c649c32712e255442a0c4d1be572bb9141a9f383b7181bd950
-
SSDEEP
384:767DUiSOL1G5k2gyk/Q0flq/Mst+xWrAF+rMRTyN/0L+EcoinblneHQM3epzXUAH:+7v32bk/Q0oEst+ArM+rMRa8NuuAdt
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
HacKed
C2
45.141.26.54:1337
Mutex
619caaa21abeda3dd8c1c8d9779b2992
Attributes
-
reg_key
619caaa21abeda3dd8c1c8d9779b2992
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
mal.bin
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections