General

  • Target

    a043bfa7b151ac31e609a0245748e027.exe

  • Size

    37KB

  • MD5

    a043bfa7b151ac31e609a0245748e027

  • SHA1

    f943edb4d73001d699957dce0eccf8662245a14a

  • SHA256

    bcfa2d821757722293b60b92c321f29a8f1cb0662fcc724395715c55c7702980

  • SHA512

    c15f912654cf9e0558329fabb3df657678b385d4c05884228527f32fcb4eb3a8fd35b80ac962ab92d2bac3f11687626cfb74128038fcb75b4d21a944cb1c303b

  • SSDEEP

    384:XrU2eQilChHeTnMDGyef9qhxTe9/6ZurAF+rMRTyN/0L+EcoinblneHQM3epzXMC:Y2VSMD9ef9qLg6IrM+rMRa8Nuy8t

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Вова

C2

0.tcp.eu.ngrok.io:13406

Mutex

8226405da7534e38141265173ceb65d4

Attributes
  • reg_key

    8226405da7534e38141265173ceb65d4

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a043bfa7b151ac31e609a0245748e027.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections