General

  • Target

    3507e1c0a846b0e399ed66a4e16113e2.exe

  • Size

    3.4MB

  • MD5

    3507e1c0a846b0e399ed66a4e16113e2

  • SHA1

    2d3e1d3bb63150b41d8fa5ef455739f9f78bd3d5

  • SHA256

    65ca589b0756f399638736bbed0bf7fefc438c482b62fe75b405f07d9be2234e

  • SHA512

    9b39954495b23665988e96346085fe4f221d36c76aeda42f4ee45fa09a11e437c49b022f86a50bd09be68007a809b3c8fb6782c498898497ead42a3c1aeeb155

  • SSDEEP

    49152:V5JEAOSHaNvPTKIO59eK4TSc5dd+qQvmH+mk79pD:VTEAOVluIseF2cp+5vqZk

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

4.tcp.eu.ngrok.io:16689

Mutex

beba7179c2c8b96895365cfaad2a5e85

Attributes
  • reg_key

    beba7179c2c8b96895365cfaad2a5e85

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3507e1c0a846b0e399ed66a4e16113e2.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections