General

  • Target

    b8551fe69898678176d2a4b2972894f53ccf7e9586a4f9b021774837c85d058cN

  • Size

    93KB

  • MD5

    17238f6dc8053c0ec569af6d021b0630

  • SHA1

    d0b436180b012ff02d06e4529b60bdb63c5a2b70

  • SHA256

    b8551fe69898678176d2a4b2972894f53ccf7e9586a4f9b021774837c85d058c

  • SHA512

    00b2cf14bfd48ec8cbd047bc821a15095b4ff99dde46fd8c1ea3ef2b2514b351432ae842340c03bca49a816af67ac904aa09346f6b7856b16ce423eed0d61784

  • SSDEEP

    768:GY33UnD9O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3LsG8:pUxOx6baIa9RZj00ljEwzGi1dDXD2gS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

127.0.0.1:5552

Mutex

90cdc4299e3838b5249c33e1c7a2dd25

Attributes
  • reg_key

    90cdc4299e3838b5249c33e1c7a2dd25

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b8551fe69898678176d2a4b2972894f53ccf7e9586a4f9b021774837c85d058cN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections