General

  • Target

    23dfda571ef7281842436d32d5d0bd75.exe

  • Size

    37KB

  • MD5

    23dfda571ef7281842436d32d5d0bd75

  • SHA1

    5bcddee7144c2ec999343a7997ef7e7d14aa442a

  • SHA256

    52343205fe743b6a5c6d18a880a9b78402733cce0aaa4a29d9836abeea35a871

  • SHA512

    f50a9628f6dd10c2098a0320f9ffd7ce682b197da486db0a645f3bf76fbc72519e34a626a5e87e4069213e399b9b5ed08c982414c14b9aee3708e6223e33b3ce

  • SSDEEP

    768:N7rtsKADtOHiR4akrYBQWllykrM+rMRa8NuA2t:N7r8tVSkBQWlEH+gRJNn

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

2.tcp.eu.ngrok.io:14569

Mutex

5bf923dd1a8032b7a94e24ee892cd60a

Attributes
  • reg_key

    5bf923dd1a8032b7a94e24ee892cd60a

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23dfda571ef7281842436d32d5d0bd75.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections