General

  • Target

    496636c1cf1881fe2be258a8010b15bc.bin

  • Size

    16KB

  • MD5

    91c3559a432424187a89fa570644c448

  • SHA1

    f686d51b06994477af38127f3f6ebf98e348d59c

  • SHA256

    702054629252b72e3ad8130d24ed4cea67abaeba2a16f3339400fb8ee28a0b85

  • SHA512

    92e99c3d7b0b7d9bc453bcb7ec2ba3fed26cecabcef95126ec48f38c3f78f15e09aff2fd1d3731de68401d4bb25a4a9ab84e49458fcfcee21dff1b300e6cf4aa

  • SSDEEP

    384:dHV2fQ9iXjtTe+0LSVyLHpxYnGqbNSONf1DJUDf201qgq2Nbbrv:yfQYTHznGqbTRer201q6Nbbrv

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

4.tcp.eu.ngrok.io:13817

Mutex

10546fac2b924182aef0386f29f37de3

Attributes
  • reg_key

    10546fac2b924182aef0386f29f37de3

  • splitter

    |'|'|

Signatures

Files

  • 496636c1cf1881fe2be258a8010b15bc.bin
    .zip

    Password: infected

  • fe698df5efd311905d59392700fbcd52698002ff3f9a5d639ac9edfa482ce908.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections