Overview

overview

10

Static

static

10

19cc0fd974...71.exe

windows7-x64

10

19cc0fd974...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19cc0fd9744aa024328cda5cd591a871.exe

  • Size

    145KB

  • MD5

    19cc0fd9744aa024328cda5cd591a871

  • SHA1

    b665138d668f5f884719afe87c8d009789fca7dc

  • SHA256

    c32ab85e1a0b351e99ecf31b699bfc11598f8ed46c185b62a3183b08f5411ca5

  • SHA512

    b3279fe9f0edffd1143ffaac43109334b798ba2241d6ab06d49da1685ab35e4a4cf0afc24717999eabf958bec662f63350798c8065061b1a4d3937ddeeb2c532

  • SSDEEP

    1536:Sd+1gl1qRWdEP+gRJNkFMzU4irDw0ByGO:Sd+1gjq8c+yJ+6zU44y

Score
10/10
gotpwnednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

gotpwned

C2

7.tcp.eu.ngrok.io:12937

Mutex

b457ccd334d05a9890b6607d986780c3

Attributes
  • reg_key

    b457ccd334d05a9890b6607d986780c3

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 19cc0fd9744aa024328cda5cd591a871.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections