General
-
Target
d8ae1399bbf2eb2be89e6e51dd10535a4f85100103d26e26f9e9b3ad2e383b10
-
Size
23KB
-
MD5
5d6ba04c0c8ab374b7c5f58faf338155
-
SHA1
7c9706f54d88cda3240b5963fb5a944f373933f0
-
SHA256
d8ae1399bbf2eb2be89e6e51dd10535a4f85100103d26e26f9e9b3ad2e383b10
-
SHA512
796b09a1745be0997ed8a051a5083259fe488acb6d9ab55487353de7ac25622983d73e61af91361dfb78718939eaaf96d17bff7b9a3a523c67e131d2e6aeb5ea
-
SSDEEP
384:IoWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZID:37O89p2rRpcnuV
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
10.10.1.11:5552
Mutex
7657c14284185fbd3fb108b43c7467ba
Attributes
-
reg_key
7657c14284185fbd3fb108b43c7467ba
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d8ae1399bbf2eb2be89e6e51dd10535a4f85100103d26e26f9e9b3ad2e383b10
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections