General

  • Target

    665c9c1e0fc46f97e902ac8046d9719661dd4b2e0a685b5e041c9a66c584c1b1N.exe

  • Size

    23KB

  • MD5

    4abf570a817c250b77a9b4fce234d4f0

  • SHA1

    ab826fabada5c2893043c8ad2daa321032d85727

  • SHA256

    665c9c1e0fc46f97e902ac8046d9719661dd4b2e0a685b5e041c9a66c584c1b1

  • SHA512

    a507011626379501e3b876249c82be446298b394993a70d66cf03205607233781414170d1042e0faa6efb67971b07c4b9dd41ec30648e6f5e0eec0508a153425

  • SSDEEP

    384:5c68yCaUVIhboNgfEimfkNzayS06vg5UhcpxH7ndmRvR6JZlbw8hqIusZzZBH:t873kgNfoaf6ARpcnuq

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

PA

C2

127.0.0.1:5552

Mutex

e229ec82a5ec02373072d0375052096f

Attributes
  • reg_key

    e229ec82a5ec02373072d0375052096f

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 665c9c1e0fc46f97e902ac8046d9719661dd4b2e0a685b5e041c9a66c584c1b1N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections