General

  • Target

    0ef1913d549b481973c92fc8254cb7e4.exe

  • Size

    43KB

  • MD5

    0ef1913d549b481973c92fc8254cb7e4

  • SHA1

    9ab521ceff75edb9030067e57e6ce85ccb2e21d7

  • SHA256

    94d7af6e96c70191d7f287be9626a4bdd2f7d674d5dec0bdb589bbbff8e3b616

  • SHA512

    b33492f7ea644b0a9ff27a9cb3b7faa216710f14607e848dabdee0b21b3cb4e9beeaa0a3e9ad913e4d64bf3ddf9bed5f350795d9eb7598f775043be035bbc782

  • SSDEEP

    384:gZynvelQ5GoyyjTllg1UmEEPXH/zIIij+ZsNO3PlpJKkkjh/TzF7pWnx/greT0pO:G9molyjTz2rrxuXQ/ok/+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

5.tcp.eu.ngrok.io:18840

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

Files

  • 0ef1913d549b481973c92fc8254cb7e4.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections