General

  • Target

    3e357895f89d4cd16c18f8d2b5e2a722.exe

  • Size

    37KB

  • MD5

    3e357895f89d4cd16c18f8d2b5e2a722

  • SHA1

    73409edc9f18f3b80d43eaa8dcb7863da3c462fe

  • SHA256

    b34f1a8e219ea6fcb31b03700a19e3cf2288a95f02f8dbb14aa55481b914b7e2

  • SHA512

    4b38f6a122a9e7b4ef5255896ae2bb4d82107d939dfc432ce66b4a67b6a912a4c2fa1ea00cff11237db12761b1d56c3ec525a8aafe7b0dca5a7e77b1d67a5915

  • SSDEEP

    384:xa8jVSikm30NVtv/Vey0bAyHpYsu2DmZrAF+rMRTyN/0L+EcoinblneHQM3epzXS:0YzO1VV0bAymt2krM+rMRa8NuNat

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Tommy212

C2

8.tcp.ngrok.io:15086

Mutex

3d7c682e8005832ba0312c056475b0dd

Attributes
  • reg_key

    3d7c682e8005832ba0312c056475b0dd

  • splitter

    |'|'|

Signatures

Files

  • 3e357895f89d4cd16c18f8d2b5e2a722.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections