General

  • Target

    Sigmanly_b37508a2880228db684f461822c955304158e1e4bf210ebb4892466d81d5941c

  • Size

    27KB

  • MD5

    2c4fe940c0aaf722b86f2784c09b65a7

  • SHA1

    6260d732f353cff21ec5f131295f169cf07f111e

  • SHA256

    b37508a2880228db684f461822c955304158e1e4bf210ebb4892466d81d5941c

  • SHA512

    b15b40035bffea1e285874817a302cbeeecfe1adebabab5ee978c8194175bf74aeba5c35474e0217cbfd1f8dd5ef25e9a3ea64ba51b1732be07db13b30296f3f

  • SSDEEP

    384:mL9QKJ3buZjmgERA4MDwoyumGPiJRjMFAQk93vmhm7UMKmIEecKdbXTzm9bVhca6:AaK5buQE4MfLFA/vMHTi9bD

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

46.153.249.193:443

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Sigmanly_b37508a2880228db684f461822c955304158e1e4bf210ebb4892466d81d5941c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections