General
-
Target
Kaspersky.exe
-
Size
93KB
-
MD5
21086f6e286e14d92875c313f5807222
-
SHA1
5f980d447ea546062d0980f1611009c44249678e
-
SHA256
579308fdc781bdf6f4500650c1cbd99e41c82e5ce3b08f6d4cf0ac0d1e47a043
-
SHA512
bc9b67143c559243ea752b205dbb72493f14741c80db2f1a41d1d2e7606c73e70eeae32a35a19735045144ab0e9dc337d63568fe88f0756b321db8f5257b180e
-
SSDEEP
768:ZY3Rl530YTXspgM0m2zGjpyDtdXWuDtXfLWh2XxrjEtCdnl2pi1Rz4Rk3msGdpG3:ilZ0AA0mT1mrWgLljEwzGi1dDiDGgS
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
Pupsik
C2
hakim32.ddns.net:2000
0.tcp.eu.ngrok.io:18053
Mutex
2a09aa82ef55b15310188afa64c92d56
Attributes
-
reg_key
2a09aa82ef55b15310188afa64c92d56
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Kaspersky.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections