General

  • Target

    1ac83e7129d69bd0c989f09e7d957521.exe

  • Size

    37KB

  • MD5

    1ac83e7129d69bd0c989f09e7d957521

  • SHA1

    e09ef99108945f579fe4beb4081b98bc7678c248

  • SHA256

    b6b9755dd349a831dcacb6dab26c2c2a0a84c2cb8eda750ccf73f705382dbcce

  • SHA512

    5c47a21bfec5c41820f05749c65a020ad7c069eba52df72226686589d7aabe6ea090a44fccdc6981c487a6a171f721d65ffa326ed4426615898a4b1b1120d07c

  • SSDEEP

    384:zcSvEiTbTvpWNcZ0y8fvCv3v3cLkacpjrAF+rMRTyN/0L+EcoinblneHQM3epzXe:gS7TZ38fvCv3E1c1rM+rMRa8Nus1t

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

8.tcp.ngrok.io:11090

Mutex

479f9eb62fbfd0e9960e984d4c18bc7a

Attributes
  • reg_key

    479f9eb62fbfd0e9960e984d4c18bc7a

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ac83e7129d69bd0c989f09e7d957521.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections