Overview

overview

10

Static

static

10

sweating.exe

windows7-x64

8

sweating.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    sweating.exe

  • Size

    301KB

  • MD5

    4ab425227b266c9c60dcc447f9b8f0de

  • SHA1

    ba8469d5f9aa57c9a0b4966909e6c72e86fc9088

  • SHA256

    f4c51f676fbf02b54592aeffda6f0b342db00d7170f479a7cf0ba40420153322

  • SHA512

    d6a5cfd7d49efcd6a30daaeab43c1dd50b843ac191d7dcae1f3c6832d5fdddcfa9684f914cb7ec0340f9fb34a09f17bbd6675753d1d5564ee53891326b897952

  • SSDEEP

    6144:HwyUjYkyIxRVfZQvykAiS7384NwzMqRaGV7m4b25F:Q5jnVhk5c38IajtmTF

Score
10/10
ssssnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

ssss

C2

0.tcp.eu.ngrok.io:17393

Mutex

252a1b9cadf21702c8a613ac0c7cb96b

Attributes
  • reg_key

    252a1b9cadf21702c8a613ac0c7cb96b

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sweating.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections