General

  • Target

    b7dd9dd7470af783d5d955b455d58cac.exe

  • Size

    37KB

  • MD5

    b7dd9dd7470af783d5d955b455d58cac

  • SHA1

    bbd0c1d74c948e95f5f007102fbabcf3867a2625

  • SHA256

    8d1bfbe0d300231cf7892a9be51258a77f52a85eac045cb42a64b357702c0c5f

  • SHA512

    af2cec43ea98a7e2c139c1433c4dbcf35ddebc3f70aa8520f64c7096a6f6844f8021cbd22fa4bf46ae4961be1972ca45407b15c1596770fad5cb41c5860fb512

  • SSDEEP

    384:zLe2KMizd9jnBhFbJ8ycPVnvvnwaUBTrAF+rMRTyN/0L+EcoinblneHQM3epzXQD:W2g9lLJfcPVn3VU9rM+rMRa8Nu2Bt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

2.tcp.eu.ngrok.io:19483

Mutex

68d7771434a71722449c404baa3e5b31

Attributes
  • reg_key

    68d7771434a71722449c404baa3e5b31

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7dd9dd7470af783d5d955b455d58cac.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections