General

  • Target

    Server.exe

  • Size

    51KB

  • MD5

    46185eb16a6efe817a8f1d09983a661e

  • SHA1

    a81243fcbba6f69238701d8b6e43493e96c207cf

  • SHA256

    84f00f25b12323673671715ee78b2f6633169f7d68da09cc7639de18e09037be

  • SHA512

    447e96ff0969f184e39cc17a33b76d2ec5e82539b203bdf5d529cba0dc98ef43223d3cd841eb3fcd8f04e43d569d7738f1318fcf69de8f262c14a930d5397142

  • SSDEEP

    768:nDId3QTv3wXTr2/4fsR5JP7eK69dA/BJf6yy:DIdg7+HpfsRqz9OJiz

Score
10/10

Malware Config

Extracted

Family

njrat

Version

njRAT v0.7d Edition Syria

C2

विनी蒂I3LjमेuविनीC4x:NताU1粹g==

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections