Overview

overview

10

Static

static

10

hello.exe

windows7_x64

10

hello.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hello_123.rar

  • Size

    16KB

  • MD5

    db3210b3ed9c67de2b54d130f04eb92e

  • SHA1

    d0ac4da641472fc99f0393f9bfc89fef79d438f8

  • SHA256

    574cd5c5cc1c280c53dabc2501198c7257f344c4617f81f0bb632c52b770b1f8

  • SHA512

    1e8f1c1a1462ece4991a5bdb1d46f39d4407708196a8e639a6dfa73552c8f0d8701c150e893e9e083a01c9ec46dcf30df5e75c285c4b4a3944d3a375b1371987

  • SSDEEP

    384:+cQQPvYJKriDDQYsr+CXrgQIuixw1uFENia7Hxe1wo7Tdr:ZBYJKbdrBX+nroZ7R0Th

Score
10/10
gaynjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

gay

C2

5.tcp.eu.ngrok.io:12059

Mutex

17a12256c22089ecda68e950006be021

Attributes
  • reg_key

    17a12256c22089ecda68e950006be021

  • splitter

    |'|'|

Signatures

Files

  • hello_123.rar
    .rar

    Password: 123

  • hello.exe
    .exe windows x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections