Behavioral task
behavioral1
Sample
ad6d18c89eef983fc9f430c196126c8d.exe
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ad6d18c89eef983fc9f430c196126c8d.exe
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
General
-
Target
ad6d18c89eef983fc9f430c196126c8d.exe
-
Size
37KB
-
MD5
ad6d18c89eef983fc9f430c196126c8d
-
SHA1
afb1de83bc99267054f39829d9a43974b9e40a20
-
SHA256
c54173049678a8818d2857d63c4b671ffe1652c74280ede9f210f542881e0287
-
SHA512
3bee79110ff9394828d4505648c0895f3fa2986e633da418532937cfb0160e30b99f163f3ca1895b0765f61bafd9d1969eec78c0f50aa29d04ae731dde5ea92e
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
i
C2
8.tcp.ngrok.io:16236
Mutex
f072c164e79deed097f86598c13d29c4
Attributes
-
reg_key
f072c164e79deed097f86598c13d29c4
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
ad6d18c89eef983fc9f430c196126c8d.exe.exe windows x86