General

  • Target

    Client.exe

  • Size

    31KB

  • MD5

    63f444ed65088c9e278ec2e6892899a6

  • SHA1

    588c5ca8e39578b9341f7cbaa7bec05af51566c4

  • SHA256

    6cb9455b415038c5fe7e6d86677f3751033b0478f7264a171cc7a277ad3b706c

  • SHA512

    1859caf0ba1c328142c8910f4504aea0096d55dac286809ae161c827558f60875f76d5840e469644092ecd05891de5da7ef0f492f50f47d8279dd86704a69567

  • SSDEEP

    768:1qmqnf1Ll58zx36DLeo0HbFZv8NQmIDUu0tihUBj:0B9q/JvsQVk5j

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

194.163.139.18:1

Mutex

b82d5bda4db4b3ae8f54987579a15212

Attributes
  • reg_key

    b82d5bda4db4b3ae8f54987579a15212

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections