General

  • Target

    72f1513b6c29378f8e7cb14a727ccdea12f1581ebcb84a2a5dd7da8a2b70cc6d.exe

  • Size

    37KB

  • MD5

    266dab6809fcc7a59f79a36edfff6682

  • SHA1

    ab0b69adea1fffa3f35705db40c9b4531624ea84

  • SHA256

    72f1513b6c29378f8e7cb14a727ccdea12f1581ebcb84a2a5dd7da8a2b70cc6d

  • SHA512

    4a8b8904023deb4b31f42bf50cb9d3e5018158a52fde270dac933f6978153b9c9bf801093d7aec22e654c7ff50e57f970db9b14ffbf4e3e61df5858ad2830f15

  • SSDEEP

    384:oGnsiDjT95hL5YyUvZ7vLOw4qYddlrAF+rMRTyN/0L+EcoinblneHQM3epzXPNra:dvv5zUvZ7blYrlrM+rMRa8Nu58t

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

learn-rage.gl.at.ply.gg:27556

Mutex

e456603c650484e45e47269f670d15a9

Attributes
  • reg_key

    e456603c650484e45e47269f670d15a9

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 72f1513b6c29378f8e7cb14a727ccdea12f1581ebcb84a2a5dd7da8a2b70cc6d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections