General

  • Target

    svClient.exe

  • Size

    94KB

  • MD5

    2ce6f0a9681d09ad541a00b640c4a7ce

  • SHA1

    e3bac43991c9571cbfc516d9c2a2dc21bb5612c8

  • SHA256

    d9083880d4fc394283a1640392ddef37a72978800fe3e6cc25561369d888047a

  • SHA512

    57c0dc20fe771853f6d21654bd4ce7fb27ea60ee2bccac005779e6cec347628fd0b7b995aaab661a488c6511adcecf51d42545e7c2708ccaa100fef96ca36451

  • SSDEEP

    1536:nAWCI6dorHYPvgNFoOE6jEwzGi1dDE3QDAgS:nAEuorHYPvgNJEDi1dI3Sp

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

Mutex

3688fb7716958cb73bc079332aca2d72

Attributes
  • reg_key

    3688fb7716958cb73bc079332aca2d72

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections