General

  • Target

    64c93155b6cf5a50486c058a37922d7795eb4476e2f7c233b3006383569527ef.exe

  • Size

    93KB

  • MD5

    023d18d506be16f8eb04fa6d5466a82f

  • SHA1

    e8395d02d731b07c91e7b17a1d661f394e7fb774

  • SHA256

    64c93155b6cf5a50486c058a37922d7795eb4476e2f7c233b3006383569527ef

  • SHA512

    4c4c5ea4893b8a06598f157cf85e6268d1db7e2d1456ecb54d303ad075e1517ac96859a8ef9920221bb72fe1e5dab95201fc8d1b14669e3294e0552bb91ff4d3

  • SSDEEP

    1536:Ox4FQWqkqqoLc2m+iIjEwzGi1dDqD3gSx:Ox4mkqqoA2xi5i1dkwC

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Lunacy PC cracked by ctrik

C2

hakim32.ddns.net:2000

127.0.0.1:5552

Mutex

da2a3455f965bc0fe872e09e43abac66

Attributes
  • reg_key

    da2a3455f965bc0fe872e09e43abac66

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 64c93155b6cf5a50486c058a37922d7795eb4476e2f7c233b3006383569527ef.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections