General

  • Target

    Server.exe

  • Size

    23KB

  • MD5

    d156a8e105181b77164651d27469110c

  • SHA1

    4504a82de7f7fd0a8c42c2ec8b31e7eb786e0085

  • SHA256

    45f01cfcad345138638c1f19eae0d04c438e23ccfe48bbb0fce715326f8b0188

  • SHA512

    998ccd12bb116024aff3d176f0a2ef65645797a6254ddd9dc90ebcfc18fd108b305e4759f50cfd1630c38d6a1d57f9511336b4dd93381caacbbf5fbbe5235953

  • SSDEEP

    384:LQ+ILghbOpMgPJ5OSEKw53g6dg7GYh/JlmRvR6JZlbw8hqIusZzZBwy:MS6bVEVRpcnuKz

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

five-sequences.gl.at.ply.gg:47561

Mutex

443b77b38ded90ef8bea6b243c1eff20

Attributes
  • reg_key

    443b77b38ded90ef8bea6b243c1eff20

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections