General

  • Target

    263938F47F154FAA5F268406FC7CDA2CBF50149EE4A61.exe

  • Size

    31KB

  • MD5

    39294d8d5128c0a2643d1f22a85e3901

  • SHA1

    0fd69e1c32725becfa542fbd72e277c0e2a26eeb

  • SHA256

    263938f47f154faa5f268406fc7cda2cbf50149ee4a61bcade8ce4c551297201

  • SHA512

    d7cd2f32418517eee0c60b8d0ab9794aaea9fd78924a31d1188d65ac689e083001ed8d039be549ef4905bfc4445ec7b1ffa52008b60b37a40451bfe1c9b5ebe2

  • SSDEEP

    768:dxmyQpp77WzxROtNKj/qx/vk2QmIDUu0tiM/j:NEKGxDQVkvj

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Aviator vzlom na koef

C2

2.tcp.ngrok.io:17939

Mutex

de2062d405c9890d3bc03a6ceffcc46a

Attributes
  • reg_key

    de2062d405c9890d3bc03a6ceffcc46a

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • 263938F47F154FAA5F268406FC7CDA2CBF50149EE4A61.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections