General

  • Target

    a872bfa41308674ce755d580307481089287f32c0da127b3e0334044361273dd.exe

  • Size

    93KB

  • MD5

    a113e36d190813b3f6cc19ea636f3e4e

  • SHA1

    93654319bd00ffee5969bcadfdab3322212fc536

  • SHA256

    a872bfa41308674ce755d580307481089287f32c0da127b3e0334044361273dd

  • SHA512

    0a97ea0ac853cb53fae9012d25fcf2f894ec9f1e0b18dc3a6a3a58325fdae1b03250b48998366e6dc0d1aa200f981c9d2587a8e913ca29f35fb5668e3b6069ce

  • SSDEEP

    1536:XFJGER1tMnnwlOU5oTRKwjEwzGi1dDsKngSb:XFJMnnwlOUWT0hi1dzgO

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

dock

C2

hakim32.ddns.net:2000

127.0.0.1:555

Mutex

c772fa1f7fc98d866443249d79c0b299

Attributes
  • reg_key

    c772fa1f7fc98d866443249d79c0b299

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a872bfa41308674ce755d580307481089287f32c0da127b3e0334044361273dd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections