General
-
Target
gamemodegame.exe
-
Size
43KB
-
MD5
eb3149b5aed08f6b3c4abb50049764f0
-
SHA1
4001ac2d3473c71cc3ae2578c8e49bf247ca5bb5
-
SHA256
f4f0017ee4cd585c200a2dcd8a87c2a98e4fca402aa5e7d18c40453c5f69c01d
-
SHA512
87c2268bacfdcac15abc3485bca48c0fc46e90b68cda30c09ae80a01b123a517eccadf1e70856f175bd50a62dd39a615ce74af7a39457ad8e8ffed2b09648e7c
-
SSDEEP
384:qZy7hsVqb08yPipFcrUMgEIV2c9z0Iij+ZsNO3PlpJKkkjh/TzF7pWnS0reT0pq7:o+hs8Y5Pi/qB4VpuXQ/oz+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
77.222.105.54:6346
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
gamemodegame.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections