General
-
Target
b9b52901675f40f69b50343cb3f03993f57972e9ffc5268915d0bd8e037855a6
-
Size
93KB
-
MD5
a54504365376cb0fd9e6f20372608acb
-
SHA1
a2701ad2e3eff1f9a142315f4b659191d6f6c08d
-
SHA256
b9b52901675f40f69b50343cb3f03993f57972e9ffc5268915d0bd8e037855a6
-
SHA512
839c14b013b98aec2bd01aee96bfb91bc6c15aa67874723eb1641ad9cba8dfbaaca306564ddbc1b75914b080162fc053ead8e6f222758d9698af8af1cd0bd4fc
-
SSDEEP
1536:oUNJD/HBZbszKu9AZp77r1jEwzGi1dDuDLgS:oUUzK4AZtHCi1d4E
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
192.168.50.163:4444
Mutex
cd719913562ec55d39985fffdb44eecb
Attributes
-
reg_key
cd719913562ec55d39985fffdb44eecb
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b9b52901675f40f69b50343cb3f03993f57972e9ffc5268915d0bd8e037855a6
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections