General

  • Target

    3cad7e0a660a1dbeb8e16e5f1119a325.exe

  • Size

    37KB

  • MD5

    3cad7e0a660a1dbeb8e16e5f1119a325

  • SHA1

    93f8f3014e7f560eb41fc2905f1bdf967ef60a14

  • SHA256

    bb9802163dbd155584113f7a4e4562b1b4c44ac5d0c4c80d70048e641001439b

  • SHA512

    20169bb70d33da5fff84edc4f81736c3190263d354035abcc0113b42f5148c88385e0fdff326dd717036e0ce0620518642fbb0b61b0d26914914a7b1bd6e5af7

  • SSDEEP

    384:gmOs0IiejvCVLO309QmykrtG+dA+VfwvOSiKrAF+rMRTyN/0L+EcoinblneHQM3E:2FdGdkrgYRwWS9rM+rMRa8NuWqt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

4.tcp.eu.ngrok.io:18046

Mutex

ac9a3f2fc23789db0b5b1bb07def1559

Attributes
  • reg_key

    ac9a3f2fc23789db0b5b1bb07def1559

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3cad7e0a660a1dbeb8e16e5f1119a325.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections