General

  • Target

    celeka.exe

  • Size

    37KB

  • MD5

    ae8c8f4af61359d2aa17115f5b446a7d

  • SHA1

    9c29f1dda42fc815a9290cc20aaf7c1b9055012e

  • SHA256

    07fa425039403fb7a4b08dc8511d2fdc41efa0248fd04bca026f97e91978a6bc

  • SHA512

    a06861e5ce829b208222045a712e1461367eb37aea4e59838b328b730cc34594e661ab3fb2a2924c237e3f205b04fae376bf94fbdf43df5829ec140d2954a9f8

  • SSDEEP

    384:M2WeZ5j6icTri5Z7JAyk/Q4AfbHZeaoNmrAF+rMRTyN/0L+EcoinblneHQM3epzT:Ge3HJ7k/Q4AzZro4rM+rMRa8NuwSt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

LOH

C2

5.tcp.eu.ngrok.io:19113

Mutex

03a5ca44e5bc25ce9e86f526c557bb0e

Attributes
  • reg_key

    03a5ca44e5bc25ce9e86f526c557bb0e

  • splitter

    |'|'|

Signatures

Files

  • celeka.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections