General

  • Target

    5107bb71d92737412382099dc5e6fe6b7d464937305d449490f51a44cf17f9a8N.exe

  • Size

    307KB

  • MD5

    7dc62320a52e154dca8eb4b23ee82790

  • SHA1

    2bd25b69c013caa88b0f938328e9d92d67b7ab7f

  • SHA256

    5107bb71d92737412382099dc5e6fe6b7d464937305d449490f51a44cf17f9a8

  • SHA512

    8d182a8ceed0a81b3209ce0fb1fd30d0261226f503cc6f1d4ae761c95b1e6d74e824a990374eb36f3c77a29a6f796fd7c971237d4efb9ac4ea3076e995d95d8d

  • SSDEEP

    3072:vnkAK3MylIIn3FIyraBOggRibieoRv8w5hhCS4:v8CIn3FIyyoJNhhCS4

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5107bb71d92737412382099dc5e6fe6b7d464937305d449490f51a44cf17f9a8N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections