General

  • Target

    a34aad8b44cf60e0d78cb7b5df04e7a9.exe

  • Size

    37KB

  • MD5

    a34aad8b44cf60e0d78cb7b5df04e7a9

  • SHA1

    f45889eec7f3d9e33deb6bbcff54b1cefb5c064c

  • SHA256

    f5cb673a1908c5d618e56e76a40d174076a86f87fbe2a45ceb08b98557baf37a

  • SHA512

    2356cf3ee4dfb2ef1303159d4f1d47c72df0e233e4b661fa9c83502ce499f34515777307ff2e135e8bc5d52f0e4d1c6789a83112a2382eeead7e3cab878fa156

  • SSDEEP

    384:r55zqi0ZJZtbH9KyM+2BzmW3VIsmabXrAF+rMRTyN/0L+EcoinblneHQM3epzX/I:t+J95M+2B6Wa9abrM+rMRa8NuxYt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

FR13NDS

C2

4.tcp.eu.ngrok.io:12248

Mutex

ba94eecacb3879501fdd28802f29e2e5

Attributes
  • reg_key

    ba94eecacb3879501fdd28802f29e2e5

  • splitter

    |'|'|

Signatures

Files

  • a34aad8b44cf60e0d78cb7b5df04e7a9.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections