General

  • Target

    IMG_0002910.exe

  • Size

    37KB

  • MD5

    1a44b484c2e12b1c02af298208ea8b60

  • SHA1

    d6bd0d7071ad794f8b1b56ee6f3b1bd23c819fba

  • SHA256

    827dcf981b46858426a73f7b85cbb99db042ae21cf0290d0d8949e90c22daa58

  • SHA512

    bf1a15882968a66cef6e7051855370f20282302bcb7e926beaada151cb759c0297a6413d2b74a164a57f8b099563f5b5612e269ae014c919deb427f977e425d9

  • SSDEEP

    384:7Wick7sgwi+tx3+j/NSyszg8QPBI3mmTlrAF+rMRTyN/0L+EcoinblneHQM3epzK:65kQLCNhszg8QeWmBrM+rMRa8Nu1at

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

7.tcp.eu.ngrok.io:15371

Mutex

a098382304664766c0cdf213854b88bc

Attributes
  • reg_key

    a098382304664766c0cdf213854b88bc

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • IMG_0002910.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections