General

  • Target

    E3125350E7B146CDF13186E9445A7FBEA6EB844ED6B2C.exe

  • Size

    31KB

  • MD5

    11ac1b109edb30c424b20c617beb6916

  • SHA1

    03ae0d139376f7e3b0d1ebb04f8db94aeb09ee36

  • SHA256

    e3125350e7b146cdf13186e9445a7fbea6eb844ed6b2c1365de22111e3faa1e4

  • SHA512

    d263fbf5eea1283506d3524a7d343ff60ca537cdf149a00017daa348aa2804e7f1d1016fee44f76d8b452638e3e76b214930dda41b8c5b9a65dc176bd219be72

  • SSDEEP

    768:gmv4fqdzNB0zx/6LmzmnAXdvAFQmIDUu0tirLj:a6KjpAQVk+j

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

7.tcp.eu.ngrok.io:13920

Mutex

c4a09cd484fd6f470d5ada5572d6d011

Attributes
  • reg_key

    c4a09cd484fd6f470d5ada5572d6d011

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • E3125350E7B146CDF13186E9445A7FBEA6EB844ED6B2C.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections