General

  • Target

    99bb59596d4e7f5d9a9f5ca7bfd1f5b647fa9aeecc56a2c674c386247074313b

  • Size

    55KB

  • MD5

    486b731eb864a9391b2a3d5432319c54

  • SHA1

    3b47b83fb4cef50508ff025ef35eb7d6d3f969c8

  • SHA256

    99bb59596d4e7f5d9a9f5ca7bfd1f5b647fa9aeecc56a2c674c386247074313b

  • SHA512

    ad5fc6d0356d3905c46731f4e34ae602b911e05e4633252eddafc988c4b838bd2d3a37cdc932d312c05b04c7c5d876124e9ce00e4c27a3ffd327b76707a0b015

  • SSDEEP

    384:KZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:I99nU4pEqt5tKhohuuXQ/oiC+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 99bb59596d4e7f5d9a9f5ca7bfd1f5b647fa9aeecc56a2c674c386247074313b
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections