General

  • Target

    9b7b2c403262e5dbb8e6117fb98de1decd49be33109f246b533a35caba270a79N.exe

  • Size

    28KB

  • MD5

    5d93850e485bf970961ace1dc0fc2f30

  • SHA1

    9df26ef505f266af21f9bc4d41513397a9e1f882

  • SHA256

    9b7b2c403262e5dbb8e6117fb98de1decd49be33109f246b533a35caba270a79

  • SHA512

    42b42d884eaf09f5da64ec892d8aa949b3fda68cf320774e5967e64a570de15053dd0e70e3d897b966b3c6bef8f4279b1232ee3f5d4f74ab36d59032c1450cbc

  • SSDEEP

    384:2PqvANl7TxTD+VF2dbofPauxnaIuXF5Xs4GOmqDwgjrzeo9GBsbh0w4wlAokw9Ox:Vu75oa4fu124AqFjXeJBKh0p29SgR3u

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Hacker

C2

154.176.35.153:1177

Mutex

8b8934ec24fc05c5f20511aa61ac2fa9

Attributes
  • reg_key

    8b8934ec24fc05c5f20511aa61ac2fa9

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b7b2c403262e5dbb8e6117fb98de1decd49be33109f246b533a35caba270a79N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections