General

  • Target

    8cb9b4d29c91954932c41dc883862775

  • Size

    23KB

  • MD5

    8cb9b4d29c91954932c41dc883862775

  • SHA1

    ec39db9b9832e29dca8d30fdec665b0e607463fc

  • SHA256

    9a70c005dfe999798687b31073d738d08aa5c8203c449be32ea1929149862862

  • SHA512

    710d2604a9606922078586da2608dd94db3c5f459b3cf5b52939f891f5413337bcd6d13c47fca747a42466f6fbc2a65df873e5f984547e173f89160718e02e01

  • SSDEEP

    384:z8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZLi:nY+sNKqNHnSdRpcnuF

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

0.tcp.ngrok.io:13747

Mutex

9b24eed39d42630e6f7cf7c28704c00c

Attributes
  • reg_key

    9b24eed39d42630e6f7cf7c28704c00c

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cb9b4d29c91954932c41dc883862775
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections