General

  • Target

    c88f8b636c8ef318eb21f2b52170907ba066da5491013607974909f1d720f4a4N

  • Size

    47KB

  • MD5

    f5f85356ab9ad8e64d84eeef9afa06d0

  • SHA1

    39b5de0326562f33bb9a731444a2ee77c6a9e7e0

  • SHA256

    c88f8b636c8ef318eb21f2b52170907ba066da5491013607974909f1d720f4a4

  • SHA512

    574b343e66845a0c14d674ee90ff6c7d2adfe6f237d9a84cc58101f74a42b64d945e0a0dc67efcfa75dae27555c0752c9afd2635638112e5db8a4ceb8ccb5b66

  • SSDEEP

    768:di7hoKoGJFNK4Aq1RehBKh0p29SgRdSb1jT8:o7hdKPg6KhG29jdS5n8

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

127.0.0.1:1177

Mutex

5cd8f17f4086744065eb0992a09e05a2

Attributes
  • reg_key

    5cd8f17f4086744065eb0992a09e05a2

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c88f8b636c8ef318eb21f2b52170907ba066da5491013607974909f1d720f4a4N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections