General

  • Target

    Server.exe

  • Size

    93KB

  • MD5

    cea4f20992cffa364724e8b15c1673cf

  • SHA1

    082e2f92180df46a35e177565158957ed8f3b0bd

  • SHA256

    cb7076dd6a1a709809dec644f95d4b888bc09df369ad0cc767ee13cceb314370

  • SHA512

    5ae2eef817e5cdeade5e0159bf52fbb32c6091e7b5d0d57721ed7605ffaf0efd017c738add55b45b975341e5c1d01a797fa6fec5205e8b5f315fa675408b151c

  • SSDEEP

    768:kY30L4eZw0FBcp4uQwV/JMVBXFbF4qeXuOWN/XxrjEtCdnl2pi1Rz4Rk3AsGdp+3:gL40wmEQwVhMTcJLYjEwzGi1dDYD+gS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

https://0bd1-2605-6440-2000-3002-f90b-8a6c-311d-ee13.ngrok-free.app.:8080

Mutex

7e19fde512dbe42326e20391d7e09012

Attributes
  • reg_key

    7e19fde512dbe42326e20391d7e09012

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections