General

  • Target

    d34abc3c57ef631e518b3d394be349a2eec8165079094f9e6873ec9452eedc1fN

  • Size

    32KB

  • MD5

    c29ef39a7f68e2814d8e5fbc478ab300

  • SHA1

    db9f8313ebad749f053a2407cfb4e10ac09f3d3e

  • SHA256

    d34abc3c57ef631e518b3d394be349a2eec8165079094f9e6873ec9452eedc1f

  • SHA512

    61adb1be14c219b6706cd40f5207588ff11ff8bbcef02f782b8c59279810a874ef24dacfbd93c957cf1a0ea5dc40497242aaed0dbf79407733619c4c22defb63

  • SSDEEP

    384:9+5o4U+mVQQyQJsixtePRuRMNFPIk+TWq4lDModg9TdFpyFEIGsJjwE7UMcrie4C:0uV4kteSspiouDbEEIGfRi+f

Score
10/10

Malware Config

Extracted

Family

njrat

Botnet

HNZ-shop

Mutex

f385d8dcb5c800d47c63cbb487c6cade

Attributes
  • reg_key

    f385d8dcb5c800d47c63cbb487c6cade

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d34abc3c57ef631e518b3d394be349a2eec8165079094f9e6873ec9452eedc1fN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections