General

  • Target

    8da6bf2b8a4b8e598f8172fa982e0f1a48fcef032bcd59906d15af0b7c9911cfN.exe

  • Size

    29KB

  • MD5

    b75c2571ee3ebdabfd06cbeaf46cbd30

  • SHA1

    3c0fc5781655c264538a09d880b6e0343bf06d58

  • SHA256

    8da6bf2b8a4b8e598f8172fa982e0f1a48fcef032bcd59906d15af0b7c9911cf

  • SHA512

    6b920934f3c57d6142e042abd0c23b954e3d89ea3a7175427358f5a6860c5f777ae95cebc419a99abf5e019d03e6dbb52ce37cb12896d73f8b0793cb6d4762ae

  • SSDEEP

    768:3Iv/27NYsDkf3mEMqw7ecBKh0p29SgR8i:Ym7N1XfdFKhG29j8i

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

aboseif2040.no-ip.biz:1177

Mutex

5cd8f17f4086744065eb0992a09e05a2

Attributes
  • reg_key

    5cd8f17f4086744065eb0992a09e05a2

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8da6bf2b8a4b8e598f8172fa982e0f1a48fcef032bcd59906d15af0b7c9911cfN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections