General

  • Target

    0x000c0000000054a8-55.dat

  • Size

    37KB

  • MD5

    6ffe6d49b69542428cc62515b9f5eb97

  • SHA1

    102eeb2271909934c31d2bd92917f73e307805e8

  • SHA256

    d82a46b2a852c6cfb6e62d94847f6a6eff33707b1d6098a882fa6853198bdd5f

  • SHA512

    1f6c7cdeeec71ae4bb29b7f4af75459e758776734da83adeb527ff5c228373f2db6f218d791cdf3bb6d35cc0e0b5858b1eeddbe8e41b4c6bc62773b85a58ea48

  • SSDEEP

    384:n5FqjcXCispfcR9L5YXyc/OS/M1EzH127ItnC+B7rAF+rMRTyN/0L+EcoinblneS:n/1j5Yic/hBUI4+BrM+rMRa8Nuj3t

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

хакнутый

C2

5.tcp.eu.ngrok.io:14626

Mutex

004c72a44463b9dde7e4385ae61fc73c

Attributes
  • reg_key

    004c72a44463b9dde7e4385ae61fc73c

  • splitter

    |'|'|

Signatures

Files

  • 0x000c0000000054a8-55.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections