General

  • Target

    Client.exe

  • Size

    31KB

  • MD5

    c0cad0e0162836b3b7fcec39c165ff0a

  • SHA1

    507dff6749fa4a9cc2515a6d48749901e5d743ef

  • SHA256

    c5815d0a09b5048a3d4a599bd45debb866bbf8c73b436ca7e26ee9fefd5d4894

  • SHA512

    5cb9fa16cccfe6b3eeebe1473815caa1f630699b697ae00fc22e5f53bf9a1b4b4bb77c37dae927ebe280df38190a80d231e1c9a501fafcbd069441e00a03640d

  • SSDEEP

    768:IjMXjwpJbb2zxxO56eqvPisfv8yQmIDUu0tiOTj:vkKdisvQVkdj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Test

C2

0.tcp.eu.ngrok.io:15489

Mutex

c17ec35e848ee365ef87095007c9e5a2

Attributes
  • reg_key

    c17ec35e848ee365ef87095007c9e5a2

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections