Overview

overview

10

Static

static

10

11d49dd940...fc.exe

windows7-x64

10

11d49dd940...fc.exe

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11d49dd9407654efd37f016694461dfc.exe

  • Size

    93KB

  • MD5

    11d49dd9407654efd37f016694461dfc

  • SHA1

    55f385dde7de9eb303a6ad158a6150d1322da736

  • SHA256

    a77d89af9f2b35acf31f220c08293373fb7670ae463d114dd9aa0ba76d040d96

  • SHA512

    2c27613c62c759059c17758cc62cada5d08e5fc0382d3c4a64badb85c45301cdc4fe38f87da328e6b98adeb00980d0b503e790b0616ad514ffb5f9d324af58c9

  • SSDEEP

    768:PY3IcRhpC0EoQspgnOmWNW6tsX2JADll2gSXxrjEtCdnl2pi1Rz4Rk3wsGdp/gS7:9cHpVEoKOmWM6sdl4jEwzGi1dDID/gS

Score
10/10
2.tcp.eu.ngrok.ionjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

2.tcp.eu.ngrok.io

C2

hakim32.ddns.net:2000

2.tcp.eu.ngrok.io:15056
Mutex

23d4a67ca31c94fb2f7e69f8c176876d

Attributes
  • reg_key

    23d4a67ca31c94fb2f7e69f8c176876d

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11d49dd9407654efd37f016694461dfc.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections