General

  • Target

    a01d852b29efaac0b9671f08ea81c785.exe

  • Size

    23KB

  • MD5

    a01d852b29efaac0b9671f08ea81c785

  • SHA1

    a788cddfb310a0614315a521f12f09001495470d

  • SHA256

    96553ba738a8e268293c58acade34423b565bea52c0f37a6dfeecc6ee8b4c5b6

  • SHA512

    24728ab944f07696c1037b3342cb0c18f610dd83a6c1ef3152437e41345789065139a24323702a642a545dbd69055b301532379171bf7aa561775475657878f3

  • SSDEEP

    384:MoWSkWHa55BgDVRGipkItzY6vZg36Eh7FVmRvR6JZlbw8hqIusZzZVFJ:7Juk9pDRpcnuev

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

selfbotmulti

C2

0.tcp.sa.ngrok.io:13490

Mutex

272c5771e642f4516578b930cd87dd63

Attributes
  • reg_key

    272c5771e642f4516578b930cd87dd63

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a01d852b29efaac0b9671f08ea81c785.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections