General

  • Target

    0c5f67c2794ed399fa2140314f0ccbd1.exe

  • Size

    23KB

  • MD5

    0c5f67c2794ed399fa2140314f0ccbd1

  • SHA1

    604d4f173cabaa75b3758bcce244f9c196caaf76

  • SHA256

    9e38c4343ab5ae60cad93323da9745d40c6856f6092992bfb68b36368e61a8c0

  • SHA512

    2edb8f410cb57330acc94e9307bc08ca1d354b6c75daabd265ac70f708fd6a7c9aca855eb549c2c0307c7523fb9789717cde07c71d56bb8d2884d4f77ba697b0

  • SSDEEP

    384:VslUlEvOEJ8xWwYJOMiOBZEdj1567gtwi5HhbQmRvR6JZlbw8hqIusZzZHSN:2eEvwIlLMRpcnu02

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Vitima

C2

0.tcp.sa.ngrok.io:19441

Mutex

425e5a743b4133cb4ddb58219b8f0675

Attributes
  • reg_key

    425e5a743b4133cb4ddb58219b8f0675

  • splitter

    |'|'|

Signatures

Files

  • 0c5f67c2794ed399fa2140314f0ccbd1.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections