General
-
Target
Server.exe
-
Size
93KB
-
MD5
478f6b8a8f1a60a3ed7d7158c7870433
-
SHA1
6143a06c120d6a238d13fd7a63acd99fe96082a2
-
SHA256
0ea9fe75f4b92fa4db859243bc898d62b20b974dca80fc0558a0afb418564930
-
SHA512
bb4ec3dc99a860dc6686980497b6b2dfdef9988104ed2cb3d62285e8a3d3359fedc3230775655041ebb3e5bd033d52727c88385cf19d9240d7fbe7f3e866b285
-
SSDEEP
768:uY3Wbi6xgrKSMZAZL28d2WmtlX+jRoI++WqXxrjEtCdnl2pi1Rz4Rk3JhsGdpSgM:wbvxg1L2AZmDO+2jEwzGi1dDLDSgS
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
C2
hakim32.ddns.net:2000
66.29.28.194:25565
Mutex
d0f07874cbb7a0a6f92d29b71f7e122d
Attributes
-
reg_key
d0f07874cbb7a0a6f92d29b71f7e122d
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Server.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections