Overview

overview

10

Static

static

10

0x000a0000...-3.exe

windows7-x64

8

0x000a0000...-3.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x000a000000012025-3.dat

  • Size

    37KB

  • MD5

    35727b79d04ec3ec0733ed94e6021fb7

  • SHA1

    883975332aa2520557fd7432a4be478544fa1926

  • SHA256

    6a2fb9232ed317a5f3864baf7b7f58a8ba042ecc46486a986e10ce9f4625efab

  • SHA512

    d1c0b8824cc0aae115f3b7fbf91428c62a46e2a171d0271b8391227a409ac2fbcc270b144dba7219314007e8b64d16320b8e4c74db3b8f738e3bdc1f2bc9a277

  • SSDEEP

    384:k0SvEiTbTvpWNcZ0y8fvCv3v3cLkacpjrAF+rMRTyN/0L+EcoinblneHQM3epzXY:fS7TZ38fvCv3E1c1rM+rMRa8Nu72t

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

hacked

C2

5.tcp.eu.ngrok.io:14794

Mutex

a8930bbff6fce9b7599f208ceade24fb

Attributes
  • reg_key

    a8930bbff6fce9b7599f208ceade24fb

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000a000000012025-3.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections