General

  • Target

    NEAS.d5afc0c80b2d2bfcae1f69aa28b71c90.exe

  • Size

    37KB

  • MD5

    d5afc0c80b2d2bfcae1f69aa28b71c90

  • SHA1

    3944d13c7855fb5fd9ecffa8780d9494656da353

  • SHA256

    7499847f1986486f11c9161f8fb98521278797e9f069a842d03da264c1b089b5

  • SHA512

    c54aca29037e39b5c5ff1f12d8ef4956f1cbfd19fa8e72b4235c2b484525bac871404de6fad009c32a792071f6fe431823936274281829c6333ecd5ed36fd4ca

  • SSDEEP

    384:2LetPqi0NJZtbH9KyM+2tzmaPREsG2D8rAF+rMRTyN/0L+EcoinblneHQM3epzX0:bqJ95M+2t6a6F2IrM+rMRa8NuAVDt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Soundpadcracked

C2

4.tcp.eu.ngrok.io:19022

Mutex

cb7001151f1c93d00a8928ce34f6b0ff

Attributes
  • reg_key

    cb7001151f1c93d00a8928ce34f6b0ff

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.d5afc0c80b2d2bfcae1f69aa28b71c90.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections