General

  • Target

    55b0b958e1fc9c123568c382b1a0404326eb227155ff76367a2d49c33d92ea40N

  • Size

    23KB

  • MD5

    b85baddd22e915e5e427ce5c04ed4b70

  • SHA1

    9af824c64e4675e0e3ecd5bf7e3f4c9d158e7b0f

  • SHA256

    55b0b958e1fc9c123568c382b1a0404326eb227155ff76367a2d49c33d92ea40

  • SHA512

    7c48b9b348b79416d6e16895b298c64f15b0eba1bd42c36c3368236615afdc90f742513e9a6000dae9a677e2d82e4b3d1ef8b5669655fd84c0ea7733c9a40632

  • SSDEEP

    384:dI2SUCoQ3XgUzwsGCw5zSEZJgA6hgHpFChrV1mRvR6JZlbw8hqIusZzZxO:CNnzdwk8Rpcnur

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

666

C2

10.0.241.51:5552

Mutex

def55e13478210d122a75775a8344a1e

Attributes
  • reg_key

    def55e13478210d122a75775a8344a1e

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 55b0b958e1fc9c123568c382b1a0404326eb227155ff76367a2d49c33d92ea40N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections