General

  • Target

    Terraria.exe

  • Size

    37KB

  • MD5

    6dba8d29c2a91741248a0afe4d2d8370

  • SHA1

    9d3f440bdc2aae60c9cc906a0e39e0579d4ad6a6

  • SHA256

    a9d17bd42531c52bcc16e7424db420bb8c56834962cc04209f5d6f937eccff47

  • SHA512

    2f5103f9cbbacecad919e005b4ebd31527176637d2d989ec5fc6269a5f7ddc3b795ccdaa7c215615e83544f183efe832d803677cc663bf429427cd7a89adeab5

  • SSDEEP

    384:UeSvEiTbTvpWNcZ0y8fvCv3v3cLkacparAF+rMRTyN/0L+EcoinblneHQM3epzXr:lS7TZ38fvCv3E1cQrM+rMRa8Nuddt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Cheat

C2

6.tcp.eu.ngrok.io:19960

Mutex

abeafdc22c8136ce35febeaa397fe990

Attributes
  • reg_key

    abeafdc22c8136ce35febeaa397fe990

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Terraria.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections