Overview

overview

10

Static

static

10

a8eb99c9a5...96.exe

windows7-x64

10

a8eb99c9a5...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    152acfcfccfe00392d27d5a954854b80.bin

  • Size

    17KB

  • MD5

    56d79c5eeb1240688e05560fda3d1ea0

  • SHA1

    eac93c828d57f2b5eaa781490e3be0e9bd414590

  • SHA256

    596a48a85a5ad9955ed303d073326c034192d969a5713957e7f491712c51f486

  • SHA512

    72ddb9a03402031db34dd5f7408dce745dde815e9d510dcb8fb58cb45a1d869f80550a6dae2796a50697f3cdf0b84b329bd47ded5d424f72429bf07e65aee2bf

  • SSDEEP

    384:wDsDUaNZIZhN892txHAiVuDFuLN/kjlLl+dBBkt5U1p+x3AQMb3ON:isAA6NJgiVDLNkJVUp+E3G

Score
10/10
svchost.exenjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

svchost.exe

C2

0.tcp.eu.ngrok.io:17312

Mutex

30911abeedf907ac3f3e2b247b68c945

Attributes
  • reg_key

    30911abeedf907ac3f3e2b247b68c945

  • splitter

    |'|'|

Signatures

Files

  • 152acfcfccfe00392d27d5a954854b80.bin
    .zip

    Password: infected

  • a8eb99c9a5ce23bb6b9177c8fb31e873ab33bd1c6ffa6d1e0ad094d07cf05a96.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections