General

  • Target

    c92a47af2e8654a296aa7f034953ba81.exe

  • Size

    59KB

  • MD5

    c92a47af2e8654a296aa7f034953ba81

  • SHA1

    2f1af4b877016cfff87fcf0fe4e9862f2a35bf58

  • SHA256

    c4abce38821e544e46dd29744a80170cc3039921659455e2aa209d3733d29bba

  • SHA512

    2f0bb8e4a05c56cfb484a0b85c49d50bdd7b9833f97cf18c03042c3d3df6e9f0846d4fcefa5b4aa4df561696ffa25bb216436f4b7a8db86d1e95c74050b77117

  • SSDEEP

    768:lr+R1NkrFV6NmFrM+rMRa8NuNHtR+qZ/DrnWDnhwdeyPxB2YsWpN4Q9Ala1B9s:lr+R1CxV6A++gRJN6rqnhw0oxBlp

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKeD

C2

0.tcp.eu.ngrok.io:10264

Mutex

91440060173fe4148049860ca7e7c16e

Attributes
  • reg_key

    91440060173fe4148049860ca7e7c16e

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c92a47af2e8654a296aa7f034953ba81.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections