General

  • Target

    avaydna.exe

  • Size

    43KB

  • MD5

    63f511fef91ec6145ef47f17947f6d74

  • SHA1

    562dcc427d36d26c98279a53eefc7635f4950652

  • SHA256

    32208b799047de8f44aeea18a62c8ee4518026141e300ede79494b972c325cc8

  • SHA512

    5c0ffecaa517ed2a9be066b9ec5b594d3a22969af7280417c50107202db89eda4671f1014619f1ffdbc0818108d068695e572c99fd8a83579e79e6aa0ed3b3aa

  • SSDEEP

    384:ZZyT5ctOnwtOyW6aEscONE3tvLE02L2IfzgIij+ZsNO3PlpJKkkjh/TzF7pWn61p:7QqAwt/W6ZscONE3RT2LruXQ/oN7+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

both-foundations.gl.at.ply.gg:60732

Mutex

Microsoft Edge Updater

Attributes
  • reg_key

    Microsoft Edge Updater

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • avaydna.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections