General

  • Target

    11d2a8f3e365714d620c65300f060cd7.exe

  • Size

    272KB

  • MD5

    11d2a8f3e365714d620c65300f060cd7

  • SHA1

    25b8d5c9ec9050dbd8d28c5a8a932ba755343d72

  • SHA256

    c6742ef6d4c010a548f85a4cbc46e0efed5c4e39b2c548564d16dfb427d6af0b

  • SHA512

    d0229720b3c5152ba45fb68eb91aa8213bd4c8acd462470403f2ad43f30d2923ec0d5a9aa9b4486ff59539d88dc1b1ae39498fa1af818dbea39114a037d1888a

  • SSDEEP

    6144:C7uLvrUqy4zjl1TB7A4C6/Kokso9ymYBrGsrR0wWY5xhJCSi5aoFExx+krF3i60:OavJv7AOKN8mQM89

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Aboba231

C2

2.tcp.eu.ngrok.io:17297

Mutex

0edd93921894c7b1bf52002be3606cf7

Attributes
  • reg_key

    0edd93921894c7b1bf52002be3606cf7

  • splitter

    |'|'|

Signatures

Files

  • 11d2a8f3e365714d620c65300f060cd7.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections