General

  • Target

    29d75037536856471105669f9ddb32362bd9b319c03cce30e88648700c816b12N.exe

  • Size

    43KB

  • MD5

    f3c6a39bbcdf14222e36ac9fcb1764c0

  • SHA1

    52d80a72eaefd786e069e888b11c6d7bd8c4ce97

  • SHA256

    29d75037536856471105669f9ddb32362bd9b319c03cce30e88648700c816b12

  • SHA512

    a43e887a4033c0aa580af5c92afa9698b6b7f3d1b7aeae88a4ddb3cd741588c34c2160bfe35b19d39a1b901c76e2c9970297e7947386b6190777f272e876315b

  • SSDEEP

    384:1ZyLaNU1SoycwJepJ3WhYYWOVOKEbv5Y8Gzz0Iij+ZsNO3PlpJKkkjh/TzF7pWnx:fJqglcwJEDMOtBY/uXQ/o2+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

RoShaders

C2

127.0.0.1:8848

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 29d75037536856471105669f9ddb32362bd9b319c03cce30e88648700c816b12N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections