Behavioral task
behavioral1
Sample
a64e20b9532a8657759de7b8a59ade56.exe
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a64e20b9532a8657759de7b8a59ade56.exe
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
General
-
Target
a64e20b9532a8657759de7b8a59ade56.exe
-
Size
37KB
-
MD5
a64e20b9532a8657759de7b8a59ade56
-
SHA1
a2a7ac6eee62c39d1f7af01a0ec5d9fd3303b32d
-
SHA256
ab4d6a82cafc92825a0b88183325855f0c44920da970b42c949d5d5ffdcc0585
-
SHA512
e5280a5982fe95c0d118fe56271ecb64f7453b2d5ee2b993bedb725eea7eae01ee535773d98ef128723d3f90fdadab051302eb8d1447431181e6f95fcae473a1
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
FFF
C2
8.tcp.ngrok.io:11308
Mutex
6f7a15d185b84f9da2e68b7b97fe916f
Attributes
-
reg_key
6f7a15d185b84f9da2e68b7b97fe916f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a64e20b9532a8657759de7b8a59ade56.exe.exe windows x86