Overview

overview

10

Static

static

10

ac30a06bb9...d9.exe

windows7-x64

8

ac30a06bb9...d9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac30a06bb9c7b5cc0e18b9bfc9e54bd9.exe

  • Size

    37KB

  • MD5

    ac30a06bb9c7b5cc0e18b9bfc9e54bd9

  • SHA1

    7232e66f7417fcb96ca2b6dc5207b0b823be1462

  • SHA256

    cef570542198bfab9319da2c3068da34484f72d77e5437f3f0592d26b26aaf69

  • SHA512

    e3a467e22e088cc60507ce48be58a439a8b06bd2e2fa1c407acd2cf821757f54070cce6902e5a13b5de23cd1b963cb5e1d7ba23564b641793f2fe834dfc2398d

  • SSDEEP

    384:id7pTgiG1C/ZfursvO6yszSLoPZYTn+LKrAF+rMRTyN/0L+EcoinblneHQM3epzg:opP5WpszSLoWT+WrM+rMRa8Nu6ht

Score
10/10
лошокnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Лошок

C2

5.tcp.eu.ngrok.io:13326

Mutex

1c7d94c93e29463dd3914e19ee6714b6

Attributes
  • reg_key

    1c7d94c93e29463dd3914e19ee6714b6

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac30a06bb9c7b5cc0e18b9bfc9e54bd9.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections