General

  • Target

    Fellasem.exe

  • Size

    37KB

  • MD5

    6fd8c8d3c1572da213f55efe38877bb2

  • SHA1

    2aededb10db8f5af2f194ed9b217c97b8f9c7eff

  • SHA256

    78eedca8d5fe5d30b24c6db6817676ad6bfb1be1114ffe696d1d47f81cd36fd3

  • SHA512

    4e70d5a7822ff3e4ffba1e8eacf33b09269f4eeffd6ed66bd25d7826a5cbdbe377840a3101eceb8d2394eb46d899cd53163f1cced1cc435df32ea0f7c7cf3081

  • SSDEEP

    384:m+7MiLzBndznNCyMGm36ePb9cGczMprAF+rMRTyN/0L+EcoinblneHQM3epzX2N:nDRNRMGm33JVcarM+rMRa8Nu8qt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

bozo

C2

5.tcp.eu.ngrok.io:12752

Mutex

5299f839420158742a089fa8b6437689

Attributes
  • reg_key

    5299f839420158742a089fa8b6437689

  • splitter

    |'|'|

Signatures

Files

  • Fellasem.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections