General

  • Target

    35c8c4aafcafa2bfe7bff1c65411e755c6d11609c2a199ccf8e4f7c109f2da8cN

  • Size

    28KB

  • MD5

    92cda4177495dd96df8009f4df452420

  • SHA1

    5e3c71be3d5e294a075a14d39008fc7b2914a274

  • SHA256

    35c8c4aafcafa2bfe7bff1c65411e755c6d11609c2a199ccf8e4f7c109f2da8c

  • SHA512

    6c6c63ba5c6ceaf2d9fa06d7b8f55abdd92549ac2a39753af3631009fd3212649e508232b8764d563e395fe12659c9c2cff2828890ebc3401f68a9870832c9db

  • SSDEEP

    384:2PqvANl7TxTD+VF2dbofPauxnaIuXF5Xs4GOmqDwgjrzeo9GBsbh0w4wlAokw9OG:Vu75oa4fu124AqFjXeJBKh0p29SgR3u0

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Hacker

C2

154.176.35.153:1177

Mutex

8b8934ec24fc05c5f20511aa61ac2fa9

Attributes
  • reg_key

    8b8934ec24fc05c5f20511aa61ac2fa9

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 35c8c4aafcafa2bfe7bff1c65411e755c6d11609c2a199ccf8e4f7c109f2da8cN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections