Overview

overview

10

Static

static

10

5B50158E04...0E.exe

windows7-x64

8

5B50158E04...0E.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5B50158E0417A97FCCDBE2F9480CF2EE16D9C9EE1A80E.exe

  • Size

    37KB

  • MD5

    0c80941236f33eb138d9a9a66f4f19ac

  • SHA1

    7e40f9c717618148978b39f8bf8fbcac8cdf2923

  • SHA256

    5b50158e0417a97fccdbe2f9480cf2ee16d9c9ee1a80ea79a7740a3d33db8f6b

  • SHA512

    aa6926fc8666d64ce1e9f5e706cdd59322590fec2e140ec49467ca424f3861a90d352942f7d4439dbb9937fe8b824ab8c674a215097e1ece86b7d0ee2c905a2f

  • SSDEEP

    384:pO2KMizdVjnBhFbJ8ycPN/fnfwacprrAF+rMRTyN/0L+EcoinblneHQM3epzXWNh:M2gVlLJfcPN/XlcNrM+rMRa8NuI5t

Score
10/10
pdfsfdfsnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

pdfsfdfs

C2

4.tcp.eu.ngrok.io:19184

Mutex

97dded3640ce6fb9643e8224ecb68bd4

Attributes
  • reg_key

    97dded3640ce6fb9643e8224ecb68bd4

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5B50158E0417A97FCCDBE2F9480CF2EE16D9C9EE1A80E.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections