Overview

overview

10

Static

static

10

b0ad2d1c5c...b3.exe

windows7-x64

10

b0ad2d1c5c...b3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0ad2d1c5c3f8292c87253e48bbe65b3.exe

  • Size

    37KB

  • MD5

    b0ad2d1c5c3f8292c87253e48bbe65b3

  • SHA1

    684d349fa51ce0315fd88dde32bb7cc9dd31d8e4

  • SHA256

    3afb59529ffa4513006bc0439666f31bfff54d2d3de260f0f5280e1ac8cc2190

  • SHA512

    84dee6eb2bd94dbde8c57ac9c98a8cfe66f7e2d7f97801eb23f172b592f897ae717445210efd42606ba15d7808c67d41c91e940b485dddc907601b27c420322e

  • SSDEEP

    384:3WqIiuVjtD+P3V+y0bf2TKtvN4suKfdrAF+rMRTyN/0L+EcoinblneHQM3epzX6J:mNmV10bf2TKtClK1rM+rMRa8Nuk5tt

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

7.tcp.eu.ngrok.io:15371

Mutex

7dbee8f2f3e9767fd1b1c74248c8262b

Attributes
  • reg_key

    7dbee8f2f3e9767fd1b1c74248c8262b

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0ad2d1c5c3f8292c87253e48bbe65b3.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections