General

  • Target

    0x00090000000122f4-78.dat

  • Size

    36KB

  • MD5

    267ccc6d8628123f193f75df75c11828

  • SHA1

    7f60acfe195e75a56ee9c76f75398be916740001

  • SHA256

    40395340c3d25551cfd9cefe9b74a2c584d82a70a7d68a4a10489a1796739ed4

  • SHA512

    17973c27077aa6d9de57cd40f1b6f38a3e297b5812fe92a0228a13c38248870000402148e901a6a2f6c696be2dfbf4dfa0c140e7c13e2e7761d40fb44f34297c

  • SSDEEP

    384:rYLmxqiU754NLHdayszjzc/j9s2UB/rAF+rMRTyN/0L+EcoinblneHQM3epzXpN6:rpZZdJszjzch1UprM+rMRa8Nu/st

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Console

C2

4.tcp.eu.ngrok.io:13667

Mutex

b9fd9af0d5623693f5e6329bcaf3dd70

Attributes
  • reg_key

    b9fd9af0d5623693f5e6329bcaf3dd70

  • splitter

    |'|'|

Signatures

Files

  • 0x00090000000122f4-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections