General

  • Target

    898fcc8265e6e452cb83786692f739d6f91eb644ad47c08f3385448c90fe7da8N

  • Size

    26KB

  • MD5

    d754eac9bf1eb40b6af1ef705e4aa950

  • SHA1

    9e16bd2493ed0b4b687a08a8c96ab0d3a418ec32

  • SHA256

    898fcc8265e6e452cb83786692f739d6f91eb644ad47c08f3385448c90fe7da8

  • SHA512

    ebfea04daed3bf228646b0751e22cde2254f1fa22ec8f2afd4dd59dad83ed649184c3f0c6c6b76825bd0678b171d7206041a895e94f58cda255976bdfc0ca496

  • SSDEEP

    384:fL+M4PanO4Y7pcdYGiTOCsPodxxM2AQk93vmhm7UMKmIEecKdbXTzm9bVhcaN6U1:TG3vc7OQ2A/vMHTi9bD

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 898fcc8265e6e452cb83786692f739d6f91eb644ad47c08f3385448c90fe7da8N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections