General

  • Target

    7256e439e5ff785baeadc6e50ea4963bedab6ae9f905997d7ea66f0890fc58e7.exe

  • Size

    23KB

  • MD5

    da1105d020250be0792d3bf21c51dc38

  • SHA1

    54249230c23dc70a52450405bbd8ce648c9765eb

  • SHA256

    7256e439e5ff785baeadc6e50ea4963bedab6ae9f905997d7ea66f0890fc58e7

  • SHA512

    f2b18e924fef4a2a65e1ce399c7ad108d881ddece7272bbd7e5d1f6e93543d0df8ea67948a4aacaa244b0e499a047a91fe36b030f64dc63ab3655f5ec27ac8b9

  • SSDEEP

    384:D8aY1ia0N/IH+WUiWiLcXyUTly2Rc87po6ngB8W+tqlf5mRvR6JZlbw8hqIusZzc:q1Re/E+WUiW6ci6NR7tZRpcnu/7

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

problems-onion.gl.at.ply.gg:37334

Mutex

626e4dfbf3e3dd60d6fbf80bed03d249

Attributes
  • reg_key

    626e4dfbf3e3dd60d6fbf80bed03d249

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7256e439e5ff785baeadc6e50ea4963bedab6ae9f905997d7ea66f0890fc58e7.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections