General

  • Target

    60dcad6ab951a06c869184647ef9fd530a49f1d24a6798f79ce3c47fc4039c38.exe

  • Size

    43KB

  • MD5

    e6b50e399eeb427f01dfec104e8cda5a

  • SHA1

    1f9bc5d2d8992df42e9ac9e784a346fe4185edbb

  • SHA256

    60dcad6ab951a06c869184647ef9fd530a49f1d24a6798f79ce3c47fc4039c38

  • SHA512

    c6ddf9b3731400545e86779777c429eb4cfdba9b0c33eaec526a90641078c3dc7731162c6f490208731af89108e8ee5205826abc82e7ca40ca79326a40ed5ba6

  • SSDEEP

    384:YZy0sYz/wpa9GP4Uy2Jd670AwEo6lhSzIIij+ZsNO3PlpJKkkjh/TzF7pWnPMgra:uLsKR4gh2vsNI6YuXQ/oW4+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

???????

C2

7.tcp.eu.ngrok.io:11394

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

Files

  • 60dcad6ab951a06c869184647ef9fd530a49f1d24a6798f79ce3c47fc4039c38.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections