General

  • Target

    FpsOptimizer_ByKartavik.exe

  • Size

    93KB

  • MD5

    0db33230bc1e881b68a31799335b53d9

  • SHA1

    f9f8eb1b71192000916de686b76c253acd8df57d

  • SHA256

    175698d488c8b8ec03b4647a3e183be501424b2cf353ae1edb1cdc16b7f8cb3f

  • SHA512

    e66d40aaca03d9302df5cb1cd5ed13b63fde98fd5b063d32c84e222e1eebd3b96cfb107010bf0ea2d04466b190d2f0a248ce018528948531d78c7fb58d176f16

  • SSDEEP

    768:YY3HepD9O/pBcxYsbae6GIXb9pDX2b9zPL0OXLeuXxrjEtCdnl2pi1Rz4Rk3wFse:neLOx6baIa9RIj00ljEwzGi1dDODpgS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

4.tcp.eu.ngrok.io:18952

Mutex

821a5e40838230be1ba47fe894e1e9d7

Attributes
  • reg_key

    821a5e40838230be1ba47fe894e1e9d7

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FpsOptimizer_ByKartavik.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections