Overview

overview

10

Static

static

10

cd53a1eb08...f2.exe

windows7-x64

10

cd53a1eb08...f2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd53a1eb080ca977a40f0d2f33dea711ac0b6ed4fc0a6102fe64a2b41c91f7f2.exe

  • Size

    37KB

  • MD5

    e42eb443fd6bf40ef9d7f2bfc76a1acb

  • SHA1

    467365bb0ef682d45c3f1664edd1690d89d56abc

  • SHA256

    cd53a1eb080ca977a40f0d2f33dea711ac0b6ed4fc0a6102fe64a2b41c91f7f2

  • SHA512

    64521ad80f984166efbbd2b2357678a6956b13607da080c1ca7c04d466b1f643abcecb56e89da7a69c57cf3bfbc672e441c023503d3e3ab2c410548a4c55ed11

  • SSDEEP

    384:7R6Iiu5jtD+P3V+y0bzif2tH5ssumTErAF+rMRTyN/0L+EcoinblneHQM3epzXtq:lRmV10bzif2tSNmorM+rMRa8NubOt

Score
10/10
maxnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

MAX

C2

4.tcp.eu.ngrok.io:19378

Mutex

e202c6dae1aeba28a88e7bf1cebb0c19

Attributes
  • reg_key

    e202c6dae1aeba28a88e7bf1cebb0c19

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cd53a1eb080ca977a40f0d2f33dea711ac0b6ed4fc0a6102fe64a2b41c91f7f2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections