General

  • Target

    163e153393d9857cd176f6b9bc9d0a35.exe

  • Size

    37KB

  • MD5

    163e153393d9857cd176f6b9bc9d0a35

  • SHA1

    312a050287ecc2ec08b9821372fe053555895aaf

  • SHA256

    49988bb286fe6559ab3a1ea776f8c67ccff40dc18018da2ab6891202768a6ddb

  • SHA512

    75b8c8e0235ec2e9292d3f67c94cb6499f6d803e1beb7b4db76c9d4197f9676e91ddfefccc8837f9073c5c2f9052f4866c5c64a0336b5afc64755a41a3921ffd

  • SSDEEP

    768:T7rJsKADtOHiR4akr2Qy1NmsrM+rMRa8Nuu6t:T7rItVSyQy1A/+gRJNh

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Sougostoso

C2

0.tcp.sa.ngrok.io:13480

Mutex

ac90450f6ed4dbb3129bb7e4ff0595c0

Attributes
  • reg_key

    ac90450f6ed4dbb3129bb7e4ff0595c0

  • splitter

    |'|'|

Signatures

Files

  • 163e153393d9857cd176f6b9bc9d0a35.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections