General
-
Target
ade5318fc95c8c6db322f3294b61be01198da9ebf35b17fd8a583ca95377604f
-
Size
65KB
-
MD5
97967e4d7d2e40dff73752873638afb6
-
SHA1
957616a6fa93f7b74db216564883f4078a1027ae
-
SHA256
ade5318fc95c8c6db322f3294b61be01198da9ebf35b17fd8a583ca95377604f
-
SHA512
5d4d3964bb0077e2f54616217397676dc12b4403be71e5db31277ce83478e77229d8fd24cb553a689dd8d05b9d56cd505331d582335b9c4a3203c9ce4215c8b7
-
SSDEEP
1536:ftAUhoN36t1QviFw1kA8VBnvbnfLteF3nLrB9z3nTJaF9bCS9vM:ftAUhoN36t1QviFCX4BnrfWl9zVaF9bq
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Platinum
Botnet
HacKed
C2
127.0.0.1:17655
Mutex
NVIDIA Corporation.exe
Attributes
-
reg_key
NVIDIA Corporation.exe
-
splitter
|Ghost|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ade5318fc95c8c6db322f3294b61be01198da9ebf35b17fd8a583ca95377604f
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections