Overview

overview

10

Static

static

10

Thut-Weara....1.exe

windows7-x64

10

Thut-Weara....1.exe

windows10-1703-x64

10

Thut-Weara....1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Thut-Wearables-Mod_1.20.1.exe

  • Size

    36KB

  • MD5

    cab2cfa2a74ec258c37ad2fe3d428023

  • SHA1

    029ef843ab73d2ec8d4425e36bb710a6b7cc34ee

  • SHA256

    0d27e0c04a218cec95fb1cf21ce0559639231c8447cf33ca5342823cf078a9de

  • SHA512

    be94dd3781539f1041e7a98e210c43a274e93015d23917ac483315835d00af4cd14432ff39c121a61ba520b2046f0072508bcdd7aaf7df133c58b739589e9e32

  • SSDEEP

    384:DkZeUiDxblmJEpRGyEfX9/lucCYC+EAzhrAF+rMRTyN/0L+EcoinblneHQM3epzC:IZaHpR9EfX9ocCV+RhrM+rMRa8Nuspt

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

6.tcp.eu.ngrok.io:16153

Mutex

16ea9746f5097999cc360c5661655039

Attributes
  • reg_key

    16ea9746f5097999cc360c5661655039

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Thut-Wearables-Mod_1.20.1.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections