General

  • Target

    c15085ebe6c2df103f4bab9f86e122e0_exe32.exe

  • Size

    37KB

  • MD5

    c15085ebe6c2df103f4bab9f86e122e0

  • SHA1

    48de1b322c11f60e38faf4b27740a3ba3ed5b153

  • SHA256

    bcaa760c1bfe02d3d14ce3376dcaeb02b140532028ce448d34e0a79cc63f338b

  • SHA512

    4fab9eceba4ef86272f59a5f620e50989ad8d59814990f7fc534cc975bd5e42a8b36561f1f208b75fd2441826e1652db24643f3930f854e853fe7d17e405089e

  • SSDEEP

    384:i7bBkiyRnDNGRn5IyUvoIdf1hg/SuV5brAF+rMRTyN/0L+EcoinblneHQM3epzXP:qs5M5jUvtdAauXrM+rMRa8NuMyt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed1

C2

2.tcp.eu.ngrok.io:15676

Mutex

0c0d9c31c52191d8af0f561f48465c85

Attributes
  • reg_key

    0c0d9c31c52191d8af0f561f48465c85

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c15085ebe6c2df103f4bab9f86e122e0_exe32.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections