General

  • Target

    4d736a5fee97f044a0ecbf56dab58a40.exe

  • Size

    37KB

  • MD5

    4d736a5fee97f044a0ecbf56dab58a40

  • SHA1

    369967c7974640435a4c1eeb89614a6d021b7afc

  • SHA256

    bdc964b618d829a7f405334e5488551a60dcebeb8d1b87db0688e251a9304f38

  • SHA512

    12069e13dc0efde6df838533233a81ab75d34f1afd15719648d9ff5f995ece1a6782ddd336ea339e78705bc9e638c7c2504a593cd2aeab033bde8c990d0ec9bb

  • SSDEEP

    384:ChQZCiT9SLNHGhlbJcycPlvQJU4XlWwsbOZvrAF+rMRTyN/0L+EcoinblneHQM3Q:oIvrJ/cPloU4M9O9rM+rMRa8Nu+XtQ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

попа

C2

4.tcp.eu.ngrok.io:17576

Mutex

210d22db9e9f36e14f1046e40b90f0cb

Attributes
  • reg_key

    210d22db9e9f36e14f1046e40b90f0cb

  • splitter

    |'|'|

Signatures

Files

  • 4d736a5fee97f044a0ecbf56dab58a40.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections