General

  • Target

    2.exe

  • Size

    37KB

  • MD5

    7a3c76859c6214a1e4684bef2f2c48b9

  • SHA1

    92f83cac4574ca11c24fed6cda219e4b27068bba

  • SHA256

    c3fd2a04a522f771dc85a5b16166f2ac2fe48389cbb58d42602ce32b90ff73fd

  • SHA512

    b87b70cea0e498c310d64315e9fd3cdffa71f329cfc8bd125c7b488300de7a00b3e5a9712be0cc63f4b1c58d8d62547a5e295c41f8a822279c7a43b81e0eb2e2

  • SSDEEP

    384:eeL8CT0i9NdTe/kCOyU7NuvLmDPM+7rAF+rMRTyN/0L+EcoinblneHQM3epzXcNZ:zLhT1CFU7NuKbMgrM+rMRa8NuOdt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

211.178.25.134:1493

Mutex

dd26d5a13ce8b755443113d781bff4f7

Attributes
  • reg_key

    dd26d5a13ce8b755443113d781bff4f7

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections