General

  • Target

    cheatchecker.exe

  • Size

    54KB

  • MD5

    5932defa66305bd65151ccb81f06d19e

  • SHA1

    f29cba31f28f716fde849d6f9883178d5037c9ad

  • SHA256

    baa08d33c57f573dbab71782968d72fddeccb23469a910762b64067111601cb0

  • SHA512

    7458f1829b52bdf7a0c5d357dd4d57eefe1418b0dc521e47d159d865b5d21348e92de8fb8f3234ac7139abd24c7f44d78d2fd2906758521ed2ed837684635d71

  • SSDEEP

    768:QvEuqW52EsltbrjtPJD3xSJSN0XxWQG35bmaePD5PvsKXXJdxIEpmUg:Qv1VGtLthD8G0hWQcGD7X3xIEpmUg

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

7.tcp.eu.ngrok.io:17865

Mutex

d80ef14819691887f4f3da8256c18413

Attributes
  • reg_key

    d80ef14819691887f4f3da8256c18413

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cheatchecker.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections