Overview

overview

10

Static

static

10

4468a1bb02...da.exe

windows7-x64

10

4468a1bb02...da.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4468a1bb02acc91e58002be4b2cfea38bafe4f4d418f8f094b55d3e5c6ccc7da.exe

  • Size

    74KB

  • MD5

    26c3af87a8c5f52b8905d4eb4e17886e

  • SHA1

    dc4f16886f1bd23cbc5745a40aacb3d5a157ece3

  • SHA256

    4468a1bb02acc91e58002be4b2cfea38bafe4f4d418f8f094b55d3e5c6ccc7da

  • SHA512

    b7c9a7ba5cefcaecd48cbdd5e131e41854dd4b80c62e61946d2b615d3cefa3215b8682e728ee94b85f32485c5c075cfa08f6bd8144b42a9c624359c0796b1ebf

  • SSDEEP

    768:ugB+R1NkrppqFiYrM+rMRa8NupjFtxtKHNQ8tPFPH5JPr1:JB+R1CNpqUj+gRJNOZtKXtPFPZJPr1

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:13811

Mutex

04b4c7212baecb41349d46ae8a9028e9

Attributes
  • reg_key

    04b4c7212baecb41349d46ae8a9028e9

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4468a1bb02acc91e58002be4b2cfea38bafe4f4d418f8f094b55d3e5c6ccc7da.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections