General

  • Target

    044f5254cc209825511ed268a514f1e19b3e9e004506a7b36ce8f201fee91808.rar

  • Size

    37KB

  • MD5

    21b710173d40350fc8e82dba01159908

  • SHA1

    1adfb0264a644f5697effad5bdbf3c408c646a1c

  • SHA256

    044f5254cc209825511ed268a514f1e19b3e9e004506a7b36ce8f201fee91808

  • SHA512

    c93dc515928c944c8bbae365817902e5a93b9eee562abd460138125267d592c0624348a55e006297852135bdcb565db2e3096a809a21c015ff820b9b091bbca3

  • SSDEEP

    384:yerP97LsikX9zNf/1uyU7/I3/9sWAnurAF+rMRTyN/0L+EcoinblneHQM3epzXLX:LPlil1lU7/I1dAurM+rMRa8NuV9tX

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

46.109.131.147:5552

Mutex

ec8be36c3337b73abe93167b086d8ebe

Attributes
  • reg_key

    ec8be36c3337b73abe93167b086d8ebe

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 044f5254cc209825511ed268a514f1e19b3e9e004506a7b36ce8f201fee91808.rar
    .rar
  • Паки.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections