General

  • Target

    3e356a29411ae2f9a8ca4019d58ca9ca71837b00c8587afbb5e3cad774ba7bc1.exe

  • Size

    43KB

  • MD5

    e1a244c5d1491aad1902df514af314db

  • SHA1

    5792f20685d9503b93ae07620911a9fc2cd5a7a6

  • SHA256

    3e356a29411ae2f9a8ca4019d58ca9ca71837b00c8587afbb5e3cad774ba7bc1

  • SHA512

    f07f143bde596cf2080a1240f721d96b0a2aeaeb0310700e95ab019d9506484fea6ca69a0408f0f821aa21c54b8caf5db02bab3338b374f3d8942ddb91270578

  • SSDEEP

    384:fTZyf9lkteXivmGUyeSRCymw5EBxE1UE+zwIij+ZsNO3PlpJKkkjh/TzF7pWnuml:fdElkQyvdhe8Ce4E6uXQ/oTC+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

quiet-cloud-77052.pktriot.net:22728

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e356a29411ae2f9a8ca4019d58ca9ca71837b00c8587afbb5e3cad774ba7bc1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections