General

  • Target

    0b06ffc35e57fa882d381e2516890367.exe

  • Size

    93KB

  • MD5

    0b06ffc35e57fa882d381e2516890367

  • SHA1

    5f1aae9f6368528637e5ff05562366b306456d80

  • SHA256

    56b3ddac0c8b5d6e4e31c452a200baf843acd84d174d05db0317f28f79b4f9cd

  • SHA512

    cf386bd0b9fa0b2358dfa9c9ca8c5d12142f3aefa4b461ffbe0d12f1ffc1be6d6581ef7a917b4e456368dba7e9c53ed5bcc13fd06893c49882f7fe23d4c0959f

  • SSDEEP

    1536:EgxOx6baIa9RZj00ljEwzGi1dDzDAegS:EgxbaIa93jNSi1dzAD

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

77.90.22.45:3333

Mutex

7d8b54f61658224964f27b9b12cf7d70

Attributes
  • reg_key

    7d8b54f61658224964f27b9b12cf7d70

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b06ffc35e57fa882d381e2516890367.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections