General
-
Target
a5c90d2ae462cbb9d984a7d0913179df70a18a71617c02d360d0810c6a7c6bad
-
Size
54KB
-
MD5
de420b822a655e8ab818cd5c7e4041d6
-
SHA1
22a947003686182eff38c7bbba3fce41f0202408
-
SHA256
a5c90d2ae462cbb9d984a7d0913179df70a18a71617c02d360d0810c6a7c6bad
-
SHA512
2daee5257c9f4467445ed60b492fc64249e8e021601804198cfd89b81eb080211a5ea2cb2d8e303014d9262ac5407ac68bf9add6e78d5c3d62fac51a7dd03146
-
SSDEEP
768:rb6ZSuxaE2EsltBhgrzJJ3U5JSN4xWQG35bmaePD5PvjwXXJdxIEpm3g:rb6SEGtBhgBJcGqWQcGD4X3xIEpm3g
Score
10/10
Malware Config
Extracted
Family
njrat
Version
<- NjRAT 0.7d Horror Edition ->
Botnet
lox
C2
127.0.0.1:6522
Mutex
4acd2decfb9ca1c42eb98e16d2b588bc
Attributes
-
reg_key
4acd2decfb9ca1c42eb98e16d2b588bc
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a5c90d2ae462cbb9d984a7d0913179df70a18a71617c02d360d0810c6a7c6bad
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections