General

  • Target

    0264df884e9cc57b4310646e3d23d949.exe

  • Size

    37KB

  • MD5

    0264df884e9cc57b4310646e3d23d949

  • SHA1

    144f246ca1eec341e836cb61e99b3d0f54b8080b

  • SHA256

    2ee5d85a0dd0ecb4d6eb39f941e8e3d175fe2209969b68766d50a441ca20e2be

  • SHA512

    30b41dfb0ab8a43a25a2be33f3c87a7ee5a4035325e638c29992ab2c7b07f054da3ece07ad441379a11fe5c63a6be872a8088433c462d457f1f8e5956977bc87

  • SSDEEP

    768:dQkkS91twjr1Sx+lyLIrM+rMRa8Nubwt:dQkkS91Ojgx+ELT+gRJN8

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

svhost

C2

7.tcp.eu.ngrok.io:19379

Mutex

9f9d4adac316494e43317580aca18bfb

Attributes
  • reg_key

    9f9d4adac316494e43317580aca18bfb

  • splitter

    |'|'|

Signatures

Files

  • 0264df884e9cc57b4310646e3d23d949.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections