General

  • Target

    b9f3f7cffaca4f7c40d5d15c7cac9e85.exe

  • Size

    37KB

  • MD5

    b9f3f7cffaca4f7c40d5d15c7cac9e85

  • SHA1

    d91ec609370046174af660acbc7f1258f1ac0c9c

  • SHA256

    bc7624743bcd785325ff2a18b2948c222ebd360f1c5e012170b3e62d7e97bbd2

  • SHA512

    2f05b3f4a6e2c8d3fb0673723c1c1901f594574154cceabf8e3c63a6ac7bd239e50a8438a7eebdece796e95f0cda3493c7aa88d5e05595d5b8efd6d94fcfa206

  • SSDEEP

    384:U4GBkiyRnDNGRn5IyUvoIdf1hg/SuGwxrAF+rMRTyN/0L+EcoinblneHQM3epzXm:XZ5M5jUvtdAaudxrM+rMRa8NupSt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

7.tcp.eu.ngrok.io:18851

Mutex

9bcad257d29b0d1c07f14488500f38d8

Attributes
  • reg_key

    9bcad257d29b0d1c07f14488500f38d8

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b9f3f7cffaca4f7c40d5d15c7cac9e85.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections