General

  • Target

    4a1243fc6a932e037763c7f564ea640e.exe

  • Size

    31KB

  • MD5

    4a1243fc6a932e037763c7f564ea640e

  • SHA1

    ee18a9f286ebcdedd15701af7fd312300c75ca6e

  • SHA256

    c21a4d4a8c9dc27845e347a3887962ff0b3412c5f6f810a5906ca12957734d82

  • SHA512

    bb7d80b8f58b5ce9c935a471c017467a7825faba3630e646523e978cb1cbe5102f6c750807d5b5ded9e104935a2664e92116d093efe05330838c0a078f99227c

  • SSDEEP

    768:SVnTaey+VfJFozxzC/krevIz5vApQmIDUu0tiQtj:cmuaJB0QVkpj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBotTC

C2

tcp.ap.ngrok.io:13864

Mutex

dc13d94d50e82d82de981c0e84da98fa

Attributes
  • reg_key

    dc13d94d50e82d82de981c0e84da98fa

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • 4a1243fc6a932e037763c7f564ea640e.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections