Overview

overview

10

Static

static

10

1738.exe

windows7-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1738.exe

  • Size

    37KB

  • MD5

    ef5775e978f47639dfc3c5d11d3d48ef

  • SHA1

    33d79eb3749bb5d61dea3cf3ed268b986f314851

  • SHA256

    b3e34f9d12e562ac6bf4b57d4d28b7c829e4d3d8c687887c236ab7b8ae655413

  • SHA512

    cb26e28d767354e2342b19d6472030e64404193d7da1b522b8eb9897323d20275cf85ad906b28101e95538eb183629b0dc6314b6e2ce79b1b9e38ec02ef7b2b5

  • SSDEEP

    384:EmOs0IiejvCVLO309QmykrtG+dA+VfwvOSiKrAF+rMRTyN/0L+EcoinblneHQM3J:KFdGdkrgYRwWS9rM+rMRa8Nuext

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

5.tcp.eu.ngrok.io:19976

Mutex

b75663e4aee0c611024b8db9f0f3d683

Attributes
  • reg_key

    b75663e4aee0c611024b8db9f0f3d683

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1738.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections