General

  • Target

    Sigmanly_4160cb40509ff8d695b3a0c5f05fe83ab0b713036aa864504af1050b9253ad48

  • Size

    43KB

  • MD5

    587b41a4b882a71a5e8e1ed72f9514a1

  • SHA1

    274674cac5c4dbb17f84c8b8c26a741e424d89f5

  • SHA256

    4160cb40509ff8d695b3a0c5f05fe83ab0b713036aa864504af1050b9253ad48

  • SHA512

    b484eda2e07c878fb85778aabf8c53619a407024d20cc6837994418b0500366e7f8f668a7547f6c944488611d6696eb3a3624cc2a5f74df9827a956c525c42d4

  • SSDEEP

    384:TZyGRFAJ2HytDU6jDgwMMzio8qpuu9D9O5UE5QzwBlpJNakkjh/TzF7pWnDmgre/:d32oStgI0Y+zq8vQO+au+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

run-motherboard.gl.at.ply.gg:34002

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Sigmanly_4160cb40509ff8d695b3a0c5f05fe83ab0b713036aa864504af1050b9253ad48
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections