General

  • Target

    53d6fc0a17fce2430fa16e5d774793cc.exe

  • Size

    43KB

  • MD5

    53d6fc0a17fce2430fa16e5d774793cc

  • SHA1

    21c937b63de6af5c7fef8d5db5d46e81ae00cb91

  • SHA256

    3dbb29bb8cf2ed2e058c8d15b687916abebaf79cce997dfd47c040d860a7e3d9

  • SHA512

    a9990b9795b7d1b269095e8f13f730b2ea1eb3c562c0cb398418ae3f711609e41d449b873fcbe3a517864e1fab09e9497b162e0be89f40ec5dfde9dcae43e024

  • SSDEEP

    384:CZy5raLd2fo7yx2tsMtNtlMXc9a1Qu9D9O5UE5QzwBlpJNakkjh/TzF7pWnujgrG:wpogmx0d9ocg6vQO+DR+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

Windows Sevice

C2

7.tcp.eu.ngrok.io:18458

Mutex

Windows Service

Attributes
  • reg_key

    Windows Service

  • splitter

    |Hassan|

Signatures

Files

  • 53d6fc0a17fce2430fa16e5d774793cc.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections