General

  • Target

    3240cb1336eb2eee722ec8b2699b8b4b08647c90db9adf9250aa4b95e2b459d1

  • Size

    43KB

  • MD5

    8806c486b69345531773b186819405c5

  • SHA1

    c2603d1af33be1101090ffeead3d4285301ba314

  • SHA256

    3240cb1336eb2eee722ec8b2699b8b4b08647c90db9adf9250aa4b95e2b459d1

  • SHA512

    c7f6c16899d4e64ed1eb859fbf78ddfea836429913cbf72496f1a186a7d3eca474f62a150b064920349a2db695ae820c145180dd940afc8167432c0e5b948435

  • SSDEEP

    384:tZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:H99nU4pEqt5tKhohuuXQ/oiC+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3240cb1336eb2eee722ec8b2699b8b4b08647c90db9adf9250aa4b95e2b459d1
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections