General

  • Target

    17b67f286ffe87085d66b07f00e56c12549a09fb8d3f275562a73312cb9b0191N.exe

  • Size

    23KB

  • MD5

    131051ebc146a5fa713e37544b36e2d0

  • SHA1

    3d9f5143eb51373b8adc2599ba6f20420e52819d

  • SHA256

    17b67f286ffe87085d66b07f00e56c12549a09fb8d3f275562a73312cb9b0191

  • SHA512

    a103a9bfc8f9f9e3dd4986f613baae33592f5fd17581dab55084a837bc60625fa387def515a1e74bb49c5ca088f4343d210f17778e542fffeeb7a2ab05da671f

  • SSDEEP

    384:ZMKyOkBkRbohza8yuTUt7u06zgV4a5pzomRvR6JZlbw8hqIusZzZr3r:y/YI1T0RpcnuAr

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

kaka

C2

chakala.no-ip.biz:5552

Mutex

4c7549b66a934af47e80f87411139e0a

Attributes
  • reg_key

    4c7549b66a934af47e80f87411139e0a

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 17b67f286ffe87085d66b07f00e56c12549a09fb8d3f275562a73312cb9b0191N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections