Overview

overview

10

Static

static

10

Terraria.exe

windows7-x64

8

Terraria.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f85eecbe1d9599f267b642fd1935fea7.bin

  • Size

    16KB

  • MD5

    43bf62ac2d8b11678e0a6777a6182541

  • SHA1

    7a0da52e86a89a74c4e2a6e3ad1e45157b8339f0

  • SHA256

    82b4eb10363590202d7d17aa21a9cf94db617a12d1d7614b9456feb77112d9b1

  • SHA512

    fcff2e3b6c989c5234993b7fb47bf0f2b0d4412dc43b71838c7099d07667f6acdf275e3fc64b31a07665449805ee294fe62e7718dae2506c00bf8cefc12ba267

  • SSDEEP

    384:aR1x5Te8XXsh4Z+4KkdIuPOFJr7l+mzb8AZdBqNzz2lRmjf2ZAytVg:O1zC8XX/+MIkCr+gbPYYA8Vg

Score
10/10
cheatnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Cheat

C2

6.tcp.eu.ngrok.io:19960

Mutex

abeafdc22c8136ce35febeaa397fe990

Attributes
  • reg_key

    abeafdc22c8136ce35febeaa397fe990

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f85eecbe1d9599f267b642fd1935fea7.bin
    .zip

    Password: infected

  • f23f0f4b55b95bd8a7b122769949edf4bd686aea35215286d1551d2c2dfe150c.rar
    .rar

    Password: infected

  • Terraria.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections