General

  • Target

    739fbead016572e091c458df21569c210b44d0cf4d55aee7642408026ba6a36e.exe

  • Size

    43KB

  • MD5

    5da4e99b5d2af3301a6994c8424be1e2

  • SHA1

    4c84f23fc8309fcfc278494dd950ca2b4931174a

  • SHA256

    739fbead016572e091c458df21569c210b44d0cf4d55aee7642408026ba6a36e

  • SHA512

    3e409a686fb17b6fdb725bbcd20d30217da51dafca3573f70e9eff619eda362d9910512ada9e0ed6dcefe3ec06707782040f3ecd85a0e9354d491b936e9faa58

  • SSDEEP

    384:oZy+nHU3VarE8yTVRUqnIQOMrg0ay0+O19D9O5UE5QzwBlpJNakkjh/TzF7pWn/c:eP03MY5T3UqnZm0pvQO+a9+LV

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed By Azzam

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 739fbead016572e091c458df21569c210b44d0cf4d55aee7642408026ba6a36e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections