Overview

overview

10

Static

static

10

424f837c55...6e.exe

windows7-x64

10

424f837c55...6e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    043e344c6cc9477cbcfc0a483b1ca568.bin

  • Size

    11KB

  • MD5

    114a70e6aecf729cb4110f2bf271b1bd

  • SHA1

    0da9fa11378a4c4bcd0c2e03a7d277e0498d343e

  • SHA256

    bcaed85335595e6774d3787aec232b7468c68095f0de5a14e5f7364b6ca2cf7e

  • SHA512

    98a975c8d98de39525dcef8138b72e0e5cdf0a00467bdfa46b6b574e29839542ca05abd835d15f1441da42fc4305b7711b87d1c35ed106abe9839bbaacaab15a

  • SSDEEP

    192:1Hvkg2Bc9GwP4No0s52eUIDaHTXHZaP8sbhImANt6E4udSJKxNYpxYtsFiBft:Ncg2Bc9rP4Nfo2e1GT5ajdGUQdSAQ8nt

Score
10/10
plug-innjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

plug-in

C2

0.tcp.ap.ngrok.io:10881

Mutex

6ca646ee7571a205268803e929e9d247

Attributes
  • reg_key

    6ca646ee7571a205268803e929e9d247

  • splitter

    |'|'|

Signatures

Files

  • 043e344c6cc9477cbcfc0a483b1ca568.bin
    .zip

    Password: infected

  • 424f837c55e7216646a63f6bbbbba766ed7521273ddfce6edad4b6335bf7a36e.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections