General

  • Target

    a49892c7bd79b4335b59f8ec8f544459.exe

  • Size

    37KB

  • MD5

    a49892c7bd79b4335b59f8ec8f544459

  • SHA1

    869629c3bb42f333b592f5916f4abcef49c37bf8

  • SHA256

    66a6f7a8b2694d0a48a54fad25498087f8ad9cf3095658f3bf3cc0119387e516

  • SHA512

    8d308b4420d0387a8703c1365f5069b8820b2d4347044522c0c3933b358f821e88442ecfc3e6477d38720b74983534c8b34b94086a8c5e2c7b6c838bccd8c912

  • SSDEEP

    384:REi1jCiMf3jBVbJsy8PR0bAoxfHvnQacpWrAF+rMRTyN/0L+EcoinblneHQM3epj:uFbJP8PR4ACHFc0rM+rMRa8NuUyt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

ISTHG_installer

C2

4.tcp.eu.ngrok.io:17514

Mutex

caf7b51723a21e7326ee5dadaba9f966

Attributes
  • reg_key

    caf7b51723a21e7326ee5dadaba9f966

  • splitter

    |'|'|

Signatures

Files

  • a49892c7bd79b4335b59f8ec8f544459.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections