General

  • Target

    43f8d95b14a04307b1a1455981ade506.exe

  • Size

    23KB

  • MD5

    43f8d95b14a04307b1a1455981ade506

  • SHA1

    57572c8132a8452c2c8f7af546859ffcc7795ed8

  • SHA256

    45a70728e0d5c32ab6b1c3b4ddd0a6b1ec2e62c9cb3cc3f8ef1f4eabb6ace928

  • SHA512

    ced4ed557c7b22c1c273992eaf33182efcb15df6e5bf4cc7a0582d12c70ebfc100abe90224ab10702d247eca0d56ce4a2818c918210b35d8c4820e1f7415d6f6

  • SSDEEP

    384:GV+n2650N3qZbATcjRGC5EowD46BgnqUhay1ZmRvR6JZlbw8hqIusZzZudN:Gam+71d5cRpcnuHz

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hextoriq99.ddns.net:443

Mutex

c5b300e02cf114ab7264097febaa3f9c

Attributes
  • reg_key

    c5b300e02cf114ab7264097febaa3f9c

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43f8d95b14a04307b1a1455981ade506.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections