General

  • Target

    lets have sex.exe

  • Size

    55KB

  • MD5

    49fe3af39f2e39b36d6519db50f05b5d

  • SHA1

    b96571c6056a6542e2e108565724ff6f8f719191

  • SHA256

    97d20ed5cc0e56db47810a100458ebc40a9c3ab4f330d3f2e6c46d3df95ee607

  • SHA512

    3a3b7385d53d237c0f1b0f313378fef57e06777bb93a426ba6496d74ffca1b2800b6af9d5f82806221dc4fe8bc9f95087208641770d88ba60e0dbf1d7ac5054b

  • SSDEEP

    1536:KeksDnHNwZ8Cam8LDdwsNMDbXExI3pmAm:usDn6SKiDdwsNMDbXExI3pm

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

fucked by kev

C2

japanese-cross.gl.at.ply.gg:16828

Mutex

11f854de8c8a1529a4c6e63081a55988

Attributes
  • reg_key

    11f854de8c8a1529a4c6e63081a55988

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lets have sex.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections