General

  • Target

    d7078737fb564428c8b8ffbaa97ea16b1606771c964124de45517142dd9dd3ef

  • Size

    23KB

  • MD5

    6225152f6308ba68d14e0386ef34cfd1

  • SHA1

    4add7b2ed86b6ca1ea1b55ae4729c06c96b95f06

  • SHA256

    d7078737fb564428c8b8ffbaa97ea16b1606771c964124de45517142dd9dd3ef

  • SHA512

    e4e955d8d9580f08444919296742050fd49f42f6d74ce0775ba357ab1fce5fddbe96524176d4cdffbb789ad73d922689de5674f467d737ae84601fb1aee05003

  • SSDEEP

    384:zT2x0W3qZN2ATtRGCfCo9D46BgnqUhL19mRvR6JZlbw8hqIusZzZ9Uu:Qh+rdflRpcnuO

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HaCkEd bY LoKn

C2

customers-edmonton.gl.at.ply.gg:28608

Mutex

5a0e6576524fad771bccf79eb40f7eca

Attributes
  • reg_key

    5a0e6576524fad771bccf79eb40f7eca

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d7078737fb564428c8b8ffbaa97ea16b1606771c964124de45517142dd9dd3ef
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections