General
-
Target
f1cbfec6af1baacb859f1b15b455278f23cf50ff81a45f0f0282f67495f98067
-
Size
37KB
-
MD5
ab3cbda7a67d1d197ef5bad8da198ac0
-
SHA1
563bfa62b96a2e8e9aef2a413c794589568457ad
-
SHA256
f1cbfec6af1baacb859f1b15b455278f23cf50ff81a45f0f0282f67495f98067
-
SHA512
4bf7090e56c00b4cba798feb9ab2f826b9970131cc6433dc785528500a1d11a5a3f4c8a7f87bc56290d2fddc546bf5ef28ef11cc4423e06f9d868e2c00a8a830
-
SSDEEP
384:H+mBkiy1nDNGRn5IyUv8IR/hh0/aKVEcrAF+rMRTyN/0L+EcoinblneHQM3epzXT:ed5M5jUvxRoCKWcrM+rMRa8Nu9Rt
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
HacKed
C2
asdaryder.duckdns.org:5552
Mutex
52b28bbc708fe48f8f67e791d73457ac
Attributes
-
reg_key
52b28bbc708fe48f8f67e791d73457ac
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f1cbfec6af1baacb859f1b15b455278f23cf50ff81a45f0f0282f67495f98067
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections