General

  • Target

    2024-10-25_8e925eb0ba4d130df3247581e3a67ee4_hiddentear_njrat

  • Size

    121KB

  • MD5

    8e925eb0ba4d130df3247581e3a67ee4

  • SHA1

    9412c506371043a97986d6e3a7a06faa07316ef5

  • SHA256

    a49eaa46a8ae3eef440327ed2584391e11e25b4e21ef7494ee1fa64a79da074b

  • SHA512

    35d70864eb6ec2835f37b43246b43efdaeb68ff4d38d4501bd4fb8c9a6b65357f6fe2ccbea749d1f24b56dbe19f8f9b631ce18817a518f4920caa7819911fad2

  • SSDEEP

    1536:P589ZvRWu+cAMwflmsolaTIrRuw+mqbz9j1MWLQs:B89501M+lmsolAIrRuw+mqv9j1MWLQ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

who-college.gl.at.ply.gg:33692

Mutex

6902b79845ea5609e3b40ff7042b1a29

Attributes
  • reg_key

    6902b79845ea5609e3b40ff7042b1a29

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-25_8e925eb0ba4d130df3247581e3a67ee4_hiddentear_njrat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections