General

  • Target

    ae2f12850ad6d196ddd1c81d5efaaf37.exe

  • Size

    37KB

  • MD5

    ae2f12850ad6d196ddd1c81d5efaaf37

  • SHA1

    11b2182a8c346b613438705a91fb25abfbccb7a9

  • SHA256

    1c728f5cd957271a82b3c2d60b26b04be8ba1dbae86bcb07a2c9be0bfbe85d35

  • SHA512

    54a039cce23af76a89c9d4a936da4b1cc0c0fdc2a0aaa24e5d63acbddc942eb5a30dab36a1ac69b1d68b9456b1cdf66f90631d3bb260ec64b5ba47dab9c7cffc

  • SSDEEP

    384:sUSvEiTbTvpWNcZ0y8fvCv3v3cLkacparAF+rMRTyN/0L+EcoinblneHQM3epzX3:TS7TZ38fvCv3E1cQrM+rMRa8NuECt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:12517

Mutex

fc7814e87ce945ca036de83e6fa910f9

Attributes
  • reg_key

    fc7814e87ce945ca036de83e6fa910f9

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae2f12850ad6d196ddd1c81d5efaaf37.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections