Overview

overview

10

Static

static

10

e79459dc4c...da.exe

windows7-x64

8

e79459dc4c...da.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b701e3585e852755624bc4965e7af509.bin

  • Size

    16KB

  • MD5

    7a74efb97d0e3c7afd1f8b8d466d89a6

  • SHA1

    731eede7041b2ba656d2b0956e54f9bfd8b6e206

  • SHA256

    b84f42800a534af7460f893bff73a5a8ef062c6db39908338250030534a2055e

  • SHA512

    847fa53b37c287b82a662f979737d1823e229d8754d4d33f05d034031a8d0b1c99dfe9f329c85ef78bacf5774d8c9e9597526399107173d532c8e1ccfa1444ca

  • SSDEEP

    384:trua3k3BkkhjqwkG7K/pJc8TCVxGxl3lvHUCyzmGb3U/xhy:taa5khj57K/j8slt0CY3U/ny

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

4.tcp.eu.ngrok.io:19554

Mutex

a3e3a48b4a1c3f8d4bc114e02152973f

Attributes
  • reg_key

    a3e3a48b4a1c3f8d4bc114e02152973f

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b701e3585e852755624bc4965e7af509.bin
    .zip

    Password: infected

  • e79459dc4c5898824dc2d32d24bcd0156e699fbdafb68ba6e5daa43cce5cbdda.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections