General

  • Target

    4c8e7854255fa91639b58d2c01d8a93d.exe

  • Size

    218KB

  • MD5

    4c8e7854255fa91639b58d2c01d8a93d

  • SHA1

    498afdcd2fe4826d6a9bba69db02ac9f89adc757

  • SHA256

    3aabf9e45901ef0bbcd46259548caef948b6a015dfb381804fad3210aced4925

  • SHA512

    708a1f06269010ba5bffb4aa768cbe35d0c0820920533fb974e65fa7d7546fbe215984d64f6581ed8bfd2faf9ebd8433215f974fc948f46257b940a39172e472

  • SSDEEP

    3072:Kvh4Bgb+yJaFk7s4YJicOZq9QpGO06qC7YuHC0C:Ih4rus4YJitw90GB6qC7M0C

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

7.tcp.eu.ngrok.io:15168

Mutex

9bf0e39364ae7c04db8a2193ff734050

Attributes
  • reg_key

    9bf0e39364ae7c04db8a2193ff734050

  • splitter

    |'|'|

Signatures

Files

  • 4c8e7854255fa91639b58d2c01d8a93d.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections