General

  • Target

    Server.exe

  • Size

    37KB

  • MD5

    367587471af9ef8ea4527323895b6466

  • SHA1

    817c50792eabf946846006ebd91322a93a664e45

  • SHA256

    80d6c43e13a4b3d5594b505b15c6d978b5b6bb11a6f1a613dd041f819d399af5

  • SHA512

    0d33e5c9c66a0d99bf29d27a35d7bb3b537bb6b3e0f236172737f416064bd63c5c5b2e4ee625c2c3c6ecef6e9f372a4f89d9d9375fdf2d26f1200999d8d79f1b

  • SSDEEP

    384:FKnraio1n7S5pbpQyEfhqH0f3IYykxarAF+rMRTyN/0L+EcoinblneHQM3epzXJk:MnT3pLEfgH0AlkYrM+rMRa8NufMt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

https://pastebin.com/raw/c5xtcUfn:19900

Mutex

dff9ad4032998f4b9cf8d97f6ee36396

Attributes
  • reg_key

    dff9ad4032998f4b9cf8d97f6ee36396

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections