General
-
Target
bf242bf12c80e2d6924e992c6d0fbab719ef9939b93851c715bf1f5c7bfbda0d
-
Size
37KB
-
MD5
ecf1399ed8c14a4a03266bb9a727e931
-
SHA1
b5c9b189df7645abee2d258f14ce80dd3e01f894
-
SHA256
bf242bf12c80e2d6924e992c6d0fbab719ef9939b93851c715bf1f5c7bfbda0d
-
SHA512
ca8080b087f03e38a276f4c821338e9df564dc1185247fd814d79660bd84a377625b2d07bf73f715d65b4b0cff7624857c16fc795a98a40623294d090dbb7343
-
SSDEEP
768:99xKjjTYic/be0PMurM+rMRa8NuTPQEt:zojjTYLDe00x+gRJNMo
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
HacKed
C2
37.235.55.68:2566
Mutex
b5a23fdb929b89d34552a60c6d38e915
Attributes
-
reg_key
b5a23fdb929b89d34552a60c6d38e915
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bf242bf12c80e2d6924e992c6d0fbab719ef9939b93851c715bf1f5c7bfbda0d
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections