General

  • Target

    ad14c1c170c9599985c9fba3f11a88aa704eefbf868e9ecbb9c7ac000a71a9b4.exe

  • Size

    28KB

  • MD5

    f471cba81ee4b41816b8a9396d61c56b

  • SHA1

    74584d859797431f6181d5631ebcdc612a04828c

  • SHA256

    ad14c1c170c9599985c9fba3f11a88aa704eefbf868e9ecbb9c7ac000a71a9b4

  • SHA512

    2444ee55de769b0d5b8297e910a55ebea17f9dbe99a7971d1a83d1a3e2bdffdc2fe62bf9fee66d7e5fadcdb7f1f52154047f615b7e77fa6b96933674ebfa8894

  • SSDEEP

    384:2PqvANl7TxTD+VF2dbofPauxnaIuXF5Xs4GOmqDwgjrzeo9GBsbh0w4wlAokw9O2:Vu75oa4fu124AqFjXeJBKh0p29SgR3u0

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Hacker

C2

154.176.35.153:1177

Mutex

8b8934ec24fc05c5f20511aa61ac2fa9

Attributes
  • reg_key

    8b8934ec24fc05c5f20511aa61ac2fa9

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad14c1c170c9599985c9fba3f11a88aa704eefbf868e9ecbb9c7ac000a71a9b4.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections