General

  • Target

    f000f55baacbd8cb266868ec681f43b630996c159e90a30c155784fe6849fb6dN.exe

  • Size

    65KB

  • MD5

    c496dae04ae896f9fdfe6b1c68ac91b0

  • SHA1

    590c16bccd06d908e3aeaee52d279966cbf4ad34

  • SHA256

    f000f55baacbd8cb266868ec681f43b630996c159e90a30c155784fe6849fb6d

  • SHA512

    3cbb1cbc98bd1d7e6d87f29aa40d108a49b3b71fcc20fbee0e5416e4800d83cb4dc28980e6e3b4091003118386ab02f4841bad42b30655f8293fe5e462bb170a

  • SSDEEP

    1536:2qwkDoN36taQviFw1MGx6BnvbRfLteF3nLrB9z3nGaF9boS9vM:2qwkDoN36taQviFCFQBn1fWl9z2aF9bQ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:1488

Mutex

gamesense.exe

Attributes
  • reg_key

    gamesense.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f000f55baacbd8cb266868ec681f43b630996c159e90a30c155784fe6849fb6dN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections