Overview

overview

10

Static

static

10

1236c0ef97...d9.exe

windows7-x64

8

1236c0ef97...d9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1236c0ef970171094fba3b7895a4d3d9.exe

  • Size

    37KB

  • MD5

    1236c0ef970171094fba3b7895a4d3d9

  • SHA1

    bca356e243b57232faabd82aaf1b94e9e620ce82

  • SHA256

    c9aa5dc253264f3c11f4c87187ed9003bb83fb9382693aef3fdce55ac6f99cc6

  • SHA512

    d4c56182e4206972bcd084f3e89bdc55c9f8267be7573840d64cb3301c044a8dfced474d024af78487ef0e30eb3837f02a059d409142481399d90cc8a77349fd

  • SSDEEP

    384:QuSvEiTbTvpWNcZ0y8fvCv3v3cLkacJE0rAF+rMRTyN/0L+EcoinblneHQM3epzx:VS7TZ38fvCv3E1cprM+rMRa8NuUpit

Score
10/10
bypassnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

bypass

C2

6.tcp.eu.ngrok.io:12954

Mutex

be4d90616045e600dd4bbde5668f0c8e

Attributes
  • reg_key

    be4d90616045e600dd4bbde5668f0c8e

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1236c0ef970171094fba3b7895a4d3d9.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections