General

  • Target

    536e56b6209a3f0a5893ee64c358beef.exe

  • Size

    118KB

  • MD5

    536e56b6209a3f0a5893ee64c358beef

  • SHA1

    d7ab63e972d7ce34b39b5a2376318f0e0d10598e

  • SHA256

    2a1837f12707bb0c3cb62653750004640a029833f7d7790f1d4ce79507a0dd16

  • SHA512

    977a48a9840dd31c29f4cf68b1bad1bcb54df0c1663bba05785431a499ad84c1d7954414012030e895c76d99fb36ab048257b4cea8c377d23aade01319006f6f

  • SSDEEP

    1536:K1v54X1LIpe+gRJNDYVSPacFyq9Qhu4lR8CMomjI9FUv9r0HHP0Yp9YN:K1h4F8e+yJF2lcguNrjI9FUvGHvX/

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

MooReports

C2

154.197.69.14:1433

Mutex

6dc05a59fd2afdd42871a13a6d06ab6f

Attributes
  • reg_key

    6dc05a59fd2afdd42871a13a6d06ab6f

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 536e56b6209a3f0a5893ee64c358beef.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections