Overview

overview

10

Static

static

10

BF6AB45665...79.exe

windows7-x64

10

BF6AB45665...79.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    BF6AB4566503F8E29257F843114AC479.exe

  • Size

    42KB

  • MD5

    bf6ab4566503f8e29257f843114ac479

  • SHA1

    9c01433ebd5722d333c306770d2caaa5f7ccd214

  • SHA256

    6f0daa56b7cb46e562234df38a3e1d3ca5760372b9dc1e9e5ae36196a1d59c16

  • SHA512

    f030c3d5ea0919798963494d38da2ff61543dcb6003b3f314527e9f87fdac55805b3da9fe9918ee9a0109cf016f4d43e00b6ac788904635a70d61a40a380bfb3

  • SSDEEP

    768:AdY+sNKqNHnSdRpcnuHPGK358pEav7dID2bBAOS0V:3+sdV+RWuHPGieNR5VAOS0V

Score
10/10
white_admnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

white_adm

C2

0.tcp.eu.ngrok.io:19120

Mutex

0b1706532be99588583f0e12e6455a52

Attributes
  • reg_key

    0b1706532be99588583f0e12e6455a52

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BF6AB4566503F8E29257F843114AC479.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections