General

  • Target

    6b891e0ea4eaccd85e90755915d90e9066646feea730b7fb834887984b81cf93.exe

  • Size

    23KB

  • MD5

    20a31ef8589534ff51715dc0dd0a221a

  • SHA1

    848e661b90295ee198bb137344dd197df4d0f368

  • SHA256

    6b891e0ea4eaccd85e90755915d90e9066646feea730b7fb834887984b81cf93

  • SHA512

    3a1d1ff8bd12888ffc833133a41fce12ab778289d9d799a22067399735b819ef79d2a3645c325eab678d33402d0c45b2447ed5e07bb22f00e60e1c2050129341

  • SSDEEP

    384:wnoWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZI47:17O89p2rRpcnu+7

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.1.11:5552

Mutex

7657c14284185fbd3fb108b43c7467ba

Attributes
  • reg_key

    7657c14284185fbd3fb108b43c7467ba

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6b891e0ea4eaccd85e90755915d90e9066646feea730b7fb834887984b81cf93.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections