General

  • Target

    ddb9f74f7723c81390a171a13e103f259908847b31a96371617db48babcd2900N.exe

  • Size

    23KB

  • MD5

    e26412a7ce9a6b7f7139a7c6c3c82ae0

  • SHA1

    5d6611fec8737f5d317a637c80d495838d673603

  • SHA256

    ddb9f74f7723c81390a171a13e103f259908847b31a96371617db48babcd2900

  • SHA512

    ec3d83f3bf42add48fc44ff978cdef0cae9d52bda0ca08eb5ec82c3f72f273b3340bc441a983037d5dc34a06f8375fc49bd4b59e84d6ee320f20f277125d0aca

  • SSDEEP

    384:XoWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZIv:w7O89p2rRpcnux

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.1.11:5552

Mutex

7657c14284185fbd3fb108b43c7467ba

Attributes
  • reg_key

    7657c14284185fbd3fb108b43c7467ba

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ddb9f74f7723c81390a171a13e103f259908847b31a96371617db48babcd2900N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections