General

  • Target

    D5189F9D42FA4F70F092D4EE353BF8DE6E5EB460A4C20.exe

  • Size

    37KB

  • MD5

    bf1371071b4e4b17a707360b7ec446b0

  • SHA1

    9e3307b4e5c7584f393ad45d2b73799b344b4080

  • SHA256

    d5189f9d42fa4f70f092d4ee353bf8de6e5eb460a4c20c0fdb89484d7eb19445

  • SHA512

    782dede94a0ff940d357fd359dcdd5a03073b91b77c0faa8aa73626a81f818e67859522503e499d8644cedce8cfde3e46cbf0d0bd4c2701c89b50907ac1ed2ed

  • SSDEEP

    384:nqqOHsiD7T95hL5YyUvhz/jO446wVjrAF+rMRTyN/0L+EcoinblneHQM3epzXuJ7:e3v5zUvhzLlwprM+rMRa8NuCyat

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Читерок

C2

4.tcp.ngrok.io:15925

Mutex

9b078d556ba0d510848ea3853fd9ecb2

Attributes
  • reg_key

    9b078d556ba0d510848ea3853fd9ecb2

  • splitter

    |'|'|

Signatures

Files

  • D5189F9D42FA4F70F092D4EE353BF8DE6E5EB460A4C20.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections