Overview

overview

10

Static

static

10

nursultan.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    nursultan.exe

  • Size

    37KB

  • MD5

    9c329f869ba50f855982802a1eaecb07

  • SHA1

    26b54686e6a409b69a148f578c09ca63130032d7

  • SHA256

    62e96f36aeb5832a9928eb22929e4e63f0ee73e91c33b9ca0d8a65e6955786ac

  • SHA512

    e3d5c3170648d9a88d08995a9aaa3b34a038861e36699ae73431383224a21d710174d3f7a358f81f5876caff38375d6ee6e86e1e29d8fc48e0c1d873bffc2dca

  • SSDEEP

    384:VrejKicgMjn5xL5oyUi8Wn1ejvfP4YicderAF+rMRTyN/0L+EcoinblneHQM3ep7:le2f5DUi8Aejv41cgrM+rMRa8NuQOt

Score
10/10
skillissuebronjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

skillissuebro

C2

0.tcp.eu.ngrok:1704

io:1704
Mutex

815009731eb883dd4c0149a5fafef665

Attributes
  • reg_key

    815009731eb883dd4c0149a5fafef665

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nursultan.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections