General

  • Target

    0dd851fb541308ad4a9968eab38d2f2607853fe4f5a345ea6e4e3ed8b0da89b0

  • Size

    23KB

  • MD5

    9a585b888b8a1e54dbd7062e1007cf53

  • SHA1

    2187f98bd2fdd8b1658dd8f290c6225ebd7d429c

  • SHA256

    0dd851fb541308ad4a9968eab38d2f2607853fe4f5a345ea6e4e3ed8b0da89b0

  • SHA512

    acd052fc0666c1e98066c922e7a4277387b65c6115fc61138fff8a8c0ba5cbbea1013ec6651bd6799dd6533159f140372ee98b9dc61cfc6988f880f867d7a3ef

  • SSDEEP

    384:LsqCm6yocx/Yp7jemiO0nd08/VQ6bgNQC5h7tmRvR6JZlbw8hqIusZzZs6N:QSoQA6mlcrRpcnux2

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

gallery-deadly.gl.at.ply.gg:2251

Mutex

3ad078b94fd440dda2867a26a10d35b4

Attributes
  • reg_key

    3ad078b94fd440dda2867a26a10d35b4

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dd851fb541308ad4a9968eab38d2f2607853fe4f5a345ea6e4e3ed8b0da89b0
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections