General

  • Target

    021949b2262a1f7d726c781b8c97fdc5575aa47896d50fc9f219b3b917acb9d1.exe

  • Size

    23KB

  • MD5

    61e8f0db5df386c96963bfc588efe149

  • SHA1

    0e45b53e1c6eb706da05a60a401ed6d12fead55b

  • SHA256

    021949b2262a1f7d726c781b8c97fdc5575aa47896d50fc9f219b3b917acb9d1

  • SHA512

    e7ced392c2b2fd021a2d8101c616efa3bfe1873b9fec268efc784f20e9778309f996112dbb8ed065ef7a0250d9514fa151c6d5c0c965dbfa7a6e96e5a5690575

  • SSDEEP

    384:ioWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZIpx:l7O89p2rRpcnufx

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.1.11:5552

Mutex

7657c14284185fbd3fb108b43c7467ba

Attributes
  • reg_key

    7657c14284185fbd3fb108b43c7467ba

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 021949b2262a1f7d726c781b8c97fdc5575aa47896d50fc9f219b3b917acb9d1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections