Timeline

• njRat v 0.7
• Infected with the client generated from this version
• Client MD5 is d1e1acd259b5548c2f09906dc3efa7df
• Warning: This malware was connected to our server and NOT to a real njRat server on internet.
• RobotHash

Wed Apr 22 11:15:05 CEST 2015

started win4 already infected

Wed Apr 22 11:23:22 CEST 2015

It got connected to the server because I started the server

Wed Apr 29 09:49:11 CEST 2015

I stopped the njrat server and started it again. Because the traffic looks like something strange was happening. Now is working again.

Sun Jun 7 20:02:32 CEST 2015

poweroff