General
-
Target
1917739297383bb37d4f159e8540b70b.exe
-
Size
43KB
-
MD5
1917739297383bb37d4f159e8540b70b
-
SHA1
12447834e3ce0745f5756f492aee4487c6c1cef4
-
SHA256
431e12f989dd7a4c9d8235f4fa9f3e026a4b55921aa2fb4942563f857681f06c
-
SHA512
7c8b032480dd4e9d972eceb1e1dc354ce5be2c66d777a12a45e267220e5ab601cbfc95d724379a903f59cdc39265a2e62e3d1a9fa66fbe4d8d71c0fa736489c5
-
SSDEEP
384:HZyGdElQ5GoyyBrlr0DiEuEe83H/zIIij+ZsNO3PlpJKkkjh/TzF7pWnI/greT0k:5gmolyBr907NRuXQ/o1/+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
2.tcp.eu.ngrok.io:11048
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1917739297383bb37d4f159e8540b70b.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections