General
-
Target
SaluteSpeech.App.Setup.2.1.1-pub.exe
-
Size
73KB
-
MD5
0892691d621d3341b28776815d450e7e
-
SHA1
91e69fe50ad1034f063885e47452c7378ae0f873
-
SHA256
f3f59b539b10597524ff912d4f4905c65a6a0571775f10871a08a54fa8795450
-
SHA512
ce08ea70c057d42286506c03d48073e63496c6c136fb258f07f2a5fe20d5035bfeb274b8856e6df8b50dfe56b135172d1be80cd376176e51242e0b0634b533f7
-
SSDEEP
1536:uXfHJgVE7iT+gRJNJzLoqKCeh/S85KN0ZUXtDA5S8E:uXfpgaQ+yJjnoqKC6/S85KNMMmS8E
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
HacKed
C2
2.tcp.eu.ngrok.io:16648
Mutex
4ca18008b36131f13998c4af171b3083
Attributes
-
reg_key
4ca18008b36131f13998c4af171b3083
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
SaluteSpeech.App.Setup.2.1.1-pub.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections