General

  • Target

    9f7e65b1acc1f334f17a44ed71937a44fb8dc14cdd52b0319be0c749b640148cN

  • Size

    27KB

  • MD5

    e4747edafe28a20223d1473a0931b7a0

  • SHA1

    f77663e86163b9f54504e44c46890199853bd8c3

  • SHA256

    9f7e65b1acc1f334f17a44ed71937a44fb8dc14cdd52b0319be0c749b640148c

  • SHA512

    f9d0cfd84013d64b5d07ca69a06a1df7b0d911b1f2765640ce24d4fe8b0465cdb23f37506d4f270056b84d77555d4181be08a91cca79c2d87a644c308cb0e0eb

  • SSDEEP

    384:kLyN6BjmgERY/cescmGPiJRjMFAQk93vmhm7UMKmIEecKdbXTzm9bVhca36ir6eR:yL4sVvFA/vMHTi9bD

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

21.ip.gl.ply.gg:57655

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9f7e65b1acc1f334f17a44ed71937a44fb8dc14cdd52b0319be0c749b640148cN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections