General

  • Target

    hello.exe

  • Size

    37KB

  • MD5

    f6578c4f484063121bb63109b543fb95

  • SHA1

    baae4772f958a85f2420a7c112f3b0ee02f962ce

  • SHA256

    c27c8f029c0ce21a116cdb60c78676cac7ea9dd38aab8bf5c394075b407d6f5e

  • SHA512

    882590671a309211271e40665ad0561c2f9474aac477a55dbe79e58122cb4370854641e84a9bd7d2d138eca3bef2d2453bacac501042139a7ec74cd37cacd87c

  • SSDEEP

    384:pDmE3hUidksXR21cGMy8PIU5fHkFlacpMrAF+rMRTyN/0L+EcoinblneHQM3epzT:NmE3bLGv8PIU58KcarM+rMRa8NuB5t

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

gay

C2

5.tcp.eu.ngrok.io:12059

Mutex

17a12256c22089ecda68e950006be021

Attributes
  • reg_key

    17a12256c22089ecda68e950006be021

  • splitter

    |'|'|

Signatures

Files

  • hello.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections