General

  • Target

    0744496413d7e8c19236bf1961c55110c75f3ae960e3f7ab7e341d856eedac43

  • Size

    43KB

  • MD5

    476d2ccafe3870913c52330a412f81c2

  • SHA1

    1b54fe20f98a8acd8e3be25c66d001ee5d5cd9e4

  • SHA256

    0744496413d7e8c19236bf1961c55110c75f3ae960e3f7ab7e341d856eedac43

  • SHA512

    ff81f0c01b3669adc6dedeefac8c259f9d7ad9dd41de4945667fa7c71b593265ef2492d661f3d1f887fd357813940d62099da579e1ffb934bddcb449f1e5fb2e

  • SSDEEP

    384:xZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:j99nU4pEqt5tKhohuuXQ/oiC+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0744496413d7e8c19236bf1961c55110c75f3ae960e3f7ab7e341d856eedac43
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.