General

  • Target

    HEUR-Trojan.Win32.Generic-0efaae5b89cc78d6c04774d89aaea91010a7c4c8e614e83417446ad0ce89dc9e.exe

  • Size

    37KB

  • MD5

    ae5724366393da812eb1f651c879e035

  • SHA1

    c5b208db86b88fd3716d6d13d1689be5c45f80bd

  • SHA256

    0efaae5b89cc78d6c04774d89aaea91010a7c4c8e614e83417446ad0ce89dc9e

  • SHA512

    77537b7d1b6e460c394689240d01e6d29eb84d13cbc2b4bc0f5769a60e22218f6221be1394f231be3c6d46b80f87d7ff0bb2c54f81c74c7fa1be5e26d9cc496d

  • SSDEEP

    768:C7rdsKADtOHiR4akrSQGXfFixrM+rMRa8Nutrt:C7rstVSWQGXfUi+gRJNC

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Microsoft2

C2

5.tcp.eu.ngrok.io:19057

Mutex

2d747324ace3cb54ab462d02c1e6e943

Attributes
  • reg_key

    2d747324ace3cb54ab462d02c1e6e943

  • splitter

    |'|'|

Signatures

Files

  • HEUR-Trojan.Win32.Generic-0efaae5b89cc78d6c04774d89aaea91010a7c4c8e614e83417446ad0ce89dc9e.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections