Overview

overview

10

Static

static

10

70f9b66116...c5.exe

windows7-x64

10

70f9b66116...c5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a358d74ef9b3e541519b8cc6c3ccc945.bin

  • Size

    1.9MB

  • MD5

    571365cf6f734032a06d43f03bb3b601

  • SHA1

    265be9ef30d6290b6a29a05ef7663af61594b041

  • SHA256

    b20f5e39f4cbdeb79e434b358f5246958b2c9be19d2879e7b76a594720162e9c

  • SHA512

    1fec3c8dbf5c4224f66da01f1de79e5fe6b0c737e502bec9a1fbf87e54e357473f349a7f9aa2e369485b35f4ada6c3e8074026084f0ee0202771fc5931385af7

  • SSDEEP

    49152:h9DGkVO58YqhTn3EOpQSHqF9aJP8crAHg8cj7IgH9XN:n6kV08hj3EODqF9aJUc8AN99

Score
10/10
hackedcsgonjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKedCSGO

C2

4.tcp.eu.ngrok.io:12880

Mutex

44d3068d903df9f83e44405f3baf67ee

Attributes
  • reg_key

    44d3068d903df9f83e44405f3baf67ee

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a358d74ef9b3e541519b8cc6c3ccc945.bin
    .zip

    Password: infected

  • 70f9b661169c4320d42f92696e98c9234fb83d3f680b8b904c8856af77207ec5.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections