General

  • Target

    431e12f989dd7a4c9d8235f4fa9f3e026a4b55921aa2fb4942563f857681f06c.exe

  • Size

    43KB

  • MD5

    1917739297383bb37d4f159e8540b70b

  • SHA1

    12447834e3ce0745f5756f492aee4487c6c1cef4

  • SHA256

    431e12f989dd7a4c9d8235f4fa9f3e026a4b55921aa2fb4942563f857681f06c

  • SHA512

    7c8b032480dd4e9d972eceb1e1dc354ce5be2c66d777a12a45e267220e5ab601cbfc95d724379a903f59cdc39265a2e62e3d1a9fa66fbe4d8d71c0fa736489c5

  • SSDEEP

    384:HZyGdElQ5GoyyBrlr0DiEuEe83H/zIIij+ZsNO3PlpJKkkjh/TzF7pWnI/greT0k:5gmolyBr907NRuXQ/o1/+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

2.tcp.eu.ngrok.io:11048

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 431e12f989dd7a4c9d8235f4fa9f3e026a4b55921aa2fb4942563f857681f06c.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections