General

  • Target

    75936e5bf3663f292b224a6f55a2d3184199e0058aa402691d4b6f081324d2d1.exe

  • Size

    23KB

  • MD5

    f31428f499ac3da21d310f79f4047837

  • SHA1

    60a7bd714ec74471958db469901c566424a8ed91

  • SHA256

    75936e5bf3663f292b224a6f55a2d3184199e0058aa402691d4b6f081324d2d1

  • SHA512

    3991a8c4c0a44eb84035b85f5f1aa9208e289bd45abf37720c494e5e70358006f364b14fdc80784f6a27d0bb281028ec41437398ec2d5f0310af8a9f0469a927

  • SSDEEP

    384:XoWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZIvR:w7O89p2rRpcnuxR

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.1.11:5552

Mutex

7657c14284185fbd3fb108b43c7467ba

Attributes
  • reg_key

    7657c14284185fbd3fb108b43c7467ba

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 75936e5bf3663f292b224a6f55a2d3184199e0058aa402691d4b6f081324d2d1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections