General

  • Target

    920a85cb909841bc249df8872d5a3a89df389990b14af0787c946965895d2475.exe

  • Size

    77KB

  • MD5

    51d450bdf07d3564adca2afca6f006c3

  • SHA1

    c234d1e8e6b76b70da9511e5a89e687cca175263

  • SHA256

    920a85cb909841bc249df8872d5a3a89df389990b14af0787c946965895d2475

  • SHA512

    cc72dbc1b34b47f97fa86dfd5ac7a64bdd93cd0d70b330601938828ed9c7e3d38c9717bc2e17d941bda931d8782ef69ce11d21ea1373929b649fab80e5aa98dc

  • SSDEEP

    1536:sJe+2wvFDp1S5wpOk3JCK6pFotfd6fOpd/9nEh9TGjJ3RI:2QwpOk5CK6XO/9ESjJ3q

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Lime

C2

192.168.100.59:6522

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    9999

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 920a85cb909841bc249df8872d5a3a89df389990b14af0787c946965895d2475.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections