General

  • Target

    3e4491dc24792ed6afec4270ead61f5e11af180ea03235fd97ea16389f5be04bN.exe

  • Size

    93KB

  • MD5

    109d24356c52390a6d1395fad07364b0

  • SHA1

    59e2abfa100be34ae4fc58b3e3a3c44e4791a992

  • SHA256

    3e4491dc24792ed6afec4270ead61f5e11af180ea03235fd97ea16389f5be04b

  • SHA512

    ac6764b793fc187ceb1e5e84a403dcb45b950dc416960f7150683eec6c35810374b32f85e5cd98b529f446eeb6fd28cef136de0a62594b3c141edce91f361025

  • SSDEEP

    1536:4U/r7EkrjaFIs7E5OxzJn8LjEwzGi1dD2DRgS:4U7jau5OVVni1dYO

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

211.207.104.213:5552

Mutex

e6e15d2617ae4eb7e2301626e6c843f2

Attributes
  • reg_key

    e6e15d2617ae4eb7e2301626e6c843f2

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e4491dc24792ed6afec4270ead61f5e11af180ea03235fd97ea16389f5be04bN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections