General

  • Target

    8c6ad65584e865dbaf64b8f09cba409a.exe

  • Size

    31KB

  • MD5

    8c6ad65584e865dbaf64b8f09cba409a

  • SHA1

    f76dfd6749fbcee19f19acb390908401b86b579a

  • SHA256

    263c652210c11bc5515405b01c877c69cb59c00d9909f1d435ed165253970a98

  • SHA512

    e905028626fa52875a5b22ef0817d0d40ad8bb9dd961a25f7af919dd6e71029f53bc298fd840c1dbbe9bab6c711dcf21c4f258233f8e21f0889631ab7be37e1f

  • SSDEEP

    768:ENu+RgJZLrGzxhuc0v0qvZhvv8dQmIDUu0tiEJj:UUKAVR4QVkNj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Amogus

C2

0.tcp.eu.ngrok.io:13820

Mutex

6a2b66305ed32d3d30d7d89ed15d09cc

Attributes
  • reg_key

    6a2b66305ed32d3d30d7d89ed15d09cc

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • 8c6ad65584e865dbaf64b8f09cba409a.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections