General
-
Target
filename.exe
-
Size
37KB
-
MD5
4e4859aafd131ec0d377d927d9101c9c
-
SHA1
c82c4ae9d598cd470d79a720e9e7fda359679ef9
-
SHA256
2e4aa0e3181c96b6001135a8f5cdf00a041ad0e0cb6f61385b5942aae3e194bd
-
SHA512
729c0028418835d6953ff86057ca4d12874cfc763be5cf912d14321e1ef46b133e8ade29a0b3d7532e572eb9e7bf980419614ab6bafda1854632730cc623a2d1
-
SSDEEP
384:cOSvEiTbTvpWNcZ0y8fvCv3v3cLkacparAF+rMRTyN/0L+EcoinblneHQM3epzXf:dS7TZ38fvCv3E1cQrM+rMRa8NuNRt
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
HacKed
C2
4.tcp.eu.ngrok.io:19701
Mutex
2659b0ef527aa8381990f87c9daf0d01
Attributes
-
reg_key
2659b0ef527aa8381990f87c9daf0d01
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
filename.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections