General

  • Target

    2e7cb63124e97e827e75b3e6a14ae0c7e679c2e12beaff3350841450126fadccN

  • Size

    93KB

  • MD5

    b40ee55751fea6d198d44511a384b350

  • SHA1

    d40723af26046e7da72364afd7b5ba173ec23a95

  • SHA256

    2e7cb63124e97e827e75b3e6a14ae0c7e679c2e12beaff3350841450126fadcc

  • SHA512

    8cc628c8dd3d0ded10d53e86cb69ab66a3bacd57ffcfbe7e7ac116f5fb801223133dded2dc3723010324442d7b8f3d773b3790433906bc70c7a00e02aa834c22

  • SSDEEP

    1536:0UVFQWqkqqoLc2m+iIjEwzGi1dDVDXgS:0UVmkqqoA2xi5i1dZQ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

147.185.221.23:21851

Mutex

8e6c7dee3b5a52470f8bde47dba6c189

Attributes
  • reg_key

    8e6c7dee3b5a52470f8bde47dba6c189

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e7cb63124e97e827e75b3e6a14ae0c7e679c2e12beaff3350841450126fadccN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections