General
-
Target
prins.exe
-
Size
43KB
-
MD5
d51b25e205220ae85d56de9a74968295
-
SHA1
c3eba0f1c06280ad634c126e133f486442ef6165
-
SHA256
e5e7287cf37a074f6b8a35940407212a695e81e921d42b3b890bd283ae0637cd
-
SHA512
4e79c2030715d68d859c160b7969c6975682f047192c37e569fe271b3b1b30611435cf461b33e640cd9f9ba5fbb83da9762f1f83133c2a00d32a6c125b0e8379
-
SSDEEP
384:iZyavHn1iDcsyEqtBfkEGCOEhGyOEtzcIij+ZsNO3PlpJKkkjh/TzF7pWnAA/gra:Q9HnU4pEqtNkE5SyZuXQ/oc3+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
127.0.0.1:8848
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
prins.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections