General

  • Target

    e3a7315a3cd76937d75506d20731abadd37327ed1d3d4e025305f0127d97769b.exe

  • Size

    23KB

  • MD5

    4793c123d265c901dae527a46799ab26

  • SHA1

    4612e3868b341064e1ee94093715db33e668a6d1

  • SHA256

    e3a7315a3cd76937d75506d20731abadd37327ed1d3d4e025305f0127d97769b

  • SHA512

    4a5b68f41ffedca411f6d73bc287caa770491dc768f7fb77c7a12f98ef8e3d02fc43251cf64e5b1da269d726a24a3ad305f0ae0de802b4ec213816d447987670

  • SSDEEP

    384:xT2x0W3qZN2ATtRGCfCo9D46BgnqUhL19mRvR6JZlbw8hqIusZzZ9Uu3:uh+rdflRpcnuO3

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HaCkEd bY LoKn

C2

customers-edmonton.gl.at.ply.gg:28608

Mutex

5a0e6576524fad771bccf79eb40f7eca

Attributes
  • reg_key

    5a0e6576524fad771bccf79eb40f7eca

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e3a7315a3cd76937d75506d20731abadd37327ed1d3d4e025305f0127d97769b.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections