Overview

overview

10

Static

static

10

Thut-Weara...ar.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Thut-Wearables-Mod-1.12.2.jar.exe

  • Size

    36KB

  • MD5

    4a92e7964117632be1c2854b1874e7ff

  • SHA1

    0ad133eac2206141fef35f0822a42bb603036b40

  • SHA256

    74033b39a5c2a489ad375a428b23b87ea653ec7871449816164a5c2041b79fe7

  • SHA512

    e6594c1cba30f84dbc439a9879fd6e3464a3129e0a199e74366ab124e5a20711d4cc2d620d618171b31f03831ae78efdb17f2588e72f7bb5ecf364af1bb2f14c

  • SSDEEP

    384:/ShAoixJDl7OHg1WykrbnPj282EH5ArAF+rMRTyN/0L+EcoinblneHQM3epzXpNF:KheR1NkrbniFEZArM+rMRa8NuXxt

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

5.tcp.eu.ngrok.io:16153

Mutex

11f9128eedebd2bc9e16de3dca3397eb

Attributes
  • reg_key

    11f9128eedebd2bc9e16de3dca3397eb

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Thut-Wearables-Mod-1.12.2.jar.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections