General

  • Target

    50d854bf1e132253009c0e6831415d34.exe

  • Size

    37KB

  • MD5

    50d854bf1e132253009c0e6831415d34

  • SHA1

    f0252dd0bfecc86bac020762b80f75fb7918fcbf

  • SHA256

    72516b6d51e1c8149faaa83e614db97ff799817165aeb94d9e357ff81ffcf442

  • SHA512

    16244d0bbad2b17a950e0eaa7318d0b173b89a3b6bd2b1936c143bb3a4da9bde0456f5216369c66e918e8f9a8614536a4cc84a5161d9e2b4f22da671b6da7a45

  • SSDEEP

    384:JAXCiMV86SmAZUytfmd3Jhig6i5GrAF+rMRTyN/0L+EcoinblneHQM3epzX3NCnJ:6KWZXtfmdWNigrM+rMRa8NuxCt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

WindowsSecurity

C2

5.tcp.eu.ngrok.io:14577

Mutex

5ffe4763fa9ffb89249eacc86d245247

Attributes
  • reg_key

    5ffe4763fa9ffb89249eacc86d245247

  • splitter

    |'|'|

Signatures

Files

  • 50d854bf1e132253009c0e6831415d34.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections