Overview

overview

10

Static

static

10

Google.exe

windows10-1703-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    Google.exe

  • Size

    301KB

  • MD5

    16c7b2832ce255d5da4a5d85a4089758

  • SHA1

    80ed8b75ae30bc4df6671c5bca8084aba2148ef4

  • SHA256

    fd13ed8d469c4cb5507716feee5c7139c38957b48a4ebff2d40d7a9269884387

  • SHA512

    65e6f8ce9f39ffcd6042cf0e39eda1cf9423367f6f98025a896fe2b2d4804f080c70250f568d377dafb4679ccfbad98be1a4974b49911f254e2ee918acbd3139

  • SSDEEP

    3072:ONwjqcl+yJ516Vl5m7PF7OE7u/vDR1GK5WwiuGK36yUG9XV/VwMM:wwjqZxl5mQS+mwic3Xv/m

Score
10/10
godlinjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

GODLI

C2

2.tcp.eu.ngrok.io:18490

Mutex

d5ffed427806ca0dc3382688f90c0697

Attributes
  • reg_key

    d5ffed427806ca0dc3382688f90c0697

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Google.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections