General

  • Target

    7123821d85bc333061adafd54a6b594a.exe

  • Size

    37KB

  • MD5

    7123821d85bc333061adafd54a6b594a

  • SHA1

    3c42363901470fcd875f9ddb1d574bbc46952f81

  • SHA256

    038582bd6848e7a7fb1c93e575108ce9b2557e121ac8f1f00622cae3ed4e0d76

  • SHA512

    32b12db0044128403b27810cf654e0ae9778fa972387524d907d313ef573b2f2427ee392dcedf1edf32dc2076cf785ad96c63deea869bc5955a77e1fefb0ecfb

  • SSDEEP

    384:hc617CiM33jBVbJsy8PJ8bAoxPPvfQaUh0ErAF+rMRTyN/0L+EcoinblneHQM3eK:2NbJP8PJQAiHVUtrM+rMRa8Nu8jt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

UseR Ha%Ked

C2

5.tcp.eu.ngrok.io:10264

Mutex

aa94689f39d30c9388b9b2066dba8aa1

Attributes
  • reg_key

    aa94689f39d30c9388b9b2066dba8aa1

  • splitter

    |'|'|

Signatures

Files

  • 7123821d85bc333061adafd54a6b594a.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections