Overview

overview

10

Static

static

10

b598203809...b6.exe

windows7-x64

8

b598203809...b6.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    b598203809aabb461b2864d1d3bb3eb6.exe

  • Size

    37KB

  • MD5

    b598203809aabb461b2864d1d3bb3eb6

  • SHA1

    57af56fe37f9d35a16f430a9796d10d84b077264

  • SHA256

    c7aa41d62466569740cf53a9d90bed12aa0895f296f5e7e51c33bf81044cb78d

  • SHA512

    16eb67345b6dfd696fecce955132d2328264d2614f08c68f604967c27306fc5125b272719c402dd465554cc98cb05eb98f56937e9685ed5776430d4e10fa2f24

  • SSDEEP

    384:JYqgUiDrblmJEpRGyEfdDPTuWCYqAlLrAF+rMRTyN/0L+EcoinblneHQM3epzX6/:KqyHpR9EfdDCWClAprM+rMRa8Nuslt

Score
10/10
vibernjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Viber

C2

4.tcp.eu.ngrok.io:16728

Mutex

e6aad560588b96a9bc412e09bc907d4a

Attributes
  • reg_key

    e6aad560588b96a9bc412e09bc907d4a

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b598203809aabb461b2864d1d3bb3eb6.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections