General

  • Target

    acdcd0e846c7f1458c8e24336ed33bd0.exe

  • Size

    54KB

  • MD5

    acdcd0e846c7f1458c8e24336ed33bd0

  • SHA1

    4133703ca1409916ce76731b66447d5b46dffaed

  • SHA256

    129c4c144e93fbc74c73e70d260ea088c238e2a6c6de24afd5da5c7cf693994e

  • SHA512

    82422acb85365dc2323688448ff812dc1d47f0dd260d1502971744bfcf2c5b2a5cffd045c777c602d66d091b48326b02ff6d983fec32aefd8f450c50c3c558e2

  • SSDEEP

    768:+SgLlLJfcP3hb5NiOrM+rMRa8Nu1VtPtQvKuzkE5nwGc:+SgLlLJUPhb5sR+gRJNGKSuzkqw

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

7.tcp.eu.ngrok.io:14936

Mutex

3d164dab2977f776fc409d5b9c25d22e

Attributes
  • reg_key

    3d164dab2977f776fc409d5b9c25d22e

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • acdcd0e846c7f1458c8e24336ed33bd0.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections