General
-
Target
faff7be904b05772bcb670f93264dadb9fb8609daa8ffb081f5482cfac0f2993
-
Size
23KB
-
MD5
f4b693162935ffdf51f0cbdac0954866
-
SHA1
fb20c4fd60139625147149b740526afd7c14fce3
-
SHA256
faff7be904b05772bcb670f93264dadb9fb8609daa8ffb081f5482cfac0f2993
-
SHA512
4f18dca94a564b1bc911261e2737f65c69950c0f5e29c5958c876b1485a1c4732f4d2dd380088e8e1f5350e3478248b4c81cd9f1523de64ab6ca1afb6e162745
-
SSDEEP
384:DoWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZIS:87O89p2rRpcnuc
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
10.10.1.11:5552
Mutex
7657c14284185fbd3fb108b43c7467ba
Attributes
-
reg_key
7657c14284185fbd3fb108b43c7467ba
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
faff7be904b05772bcb670f93264dadb9fb8609daa8ffb081f5482cfac0f2993
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections