General

  • Target

    Sexxrverexe.exe

  • Size

    37KB

  • MD5

    167f3507ff7fbfdf84e4da21412d7e7a

  • SHA1

    c3bf554e5aa894b0822fc63757e6d9bad2f226f2

  • SHA256

    dbd1ea254be16e4b597e8db2b8cc43cec0e331da99d9cf47a88545849f43b7e0

  • SHA512

    5f9c058e4d6be585f14d09875eec532651db7fbbab446ae63467ae1d5366afc92943210eb896c49510b791bd08b1dbd8ea4aa5493390bb4b64d0a363319525ca

  • SSDEEP

    384:cinsiDjT95hL5YyUvZ7vLOw4qYddlrAF+rMRTyN/0L+EcoinblneHQM3epzXeNrW:9vv5zUvZ7blYrlrM+rMRa8NuAct

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

2.tcp.eu.ngrok.io:16770

Mutex

b4b62aaa73995cb5400ff644658d1ff7

Attributes
  • reg_key

    b4b62aaa73995cb5400ff644658d1ff7

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Sexxrverexe.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections