General
-
Target
66e6666832aaa48c08965e8d2101ddaa0cbbe4535d4de79503d6a00712ba7475
-
Size
43KB
-
MD5
4d335bcc63eb894951ab19a5e2bdbaf5
-
SHA1
09ca6502e8e76039e80840b2d62fea4b996b82da
-
SHA256
66e6666832aaa48c08965e8d2101ddaa0cbbe4535d4de79503d6a00712ba7475
-
SHA512
063824217e5852e61efcb2a787a32e17f1c8f70b44a4e603c1e8744713d92a81045684d907b50782b7d557ecc45c0a884c338fcebc30058de31856410a69d53a
-
SSDEEP
384:tZyN4DgolYxOoyi08Haf2ASEN8MFQPzgIij+ZsNO3PlpJKkkjh/TzF7pWnlkzVgu:HQouIli04sDP8qwuXQ/orzV+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
skam
C2
127.0.0.1:8888
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
66e6666832aaa48c08965e8d2101ddaa0cbbe4535d4de79503d6a00712ba7475
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections