General

  • Target

    08b9c1375428e88ac0c51990fc9e9e01c5ad4b02b0671f325bb2edfae8c625c0_JC.exe

  • Size

    37KB

  • MD5

    aab43503c625eabdd8a44cba67e61055

  • SHA1

    c4bd37d8fc215561fe12a664c41e1568bc0ee715

  • SHA256

    08b9c1375428e88ac0c51990fc9e9e01c5ad4b02b0671f325bb2edfae8c625c0

  • SHA512

    87452cd787f1169a29974daf5c6f5fee9ce26ccb88f40e2bae69fc8c224c361c250cd3d7d2bfe0ee7de72ca7fb3f8dcfd31ce7a521a119ccc73c83c71f1d6d9f

  • SSDEEP

    384:R2veoixJhl7OHg1WykrppPl48uiX60rAF+rMRTyN/0L+EcoinblneHQM3epzXENB:0v+R1NkrppqFidrM+rMRa8Nuy5t

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

5.tcp.eu.ngrok.io:11854

Mutex

d23353341f37f3ae079efe44b52baa3e

Attributes
  • reg_key

    d23353341f37f3ae079efe44b52baa3e

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08b9c1375428e88ac0c51990fc9e9e01c5ad4b02b0671f325bb2edfae8c625c0_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections