General

  • Target

    uh.exe

  • Size

    37KB

  • MD5

    cac249572c1f320432d144124ab0138c

  • SHA1

    3e1a7b1bf5f7fad3c74c1a2e825b03c57f48d851

  • SHA256

    23683100e3c12de8f9e49501d4a50b7b1831dbd780359902e0c5fb35166a782c

  • SHA512

    6ace81c3c125d4c830e5a313499a1f6ab124d1c864e9816e91809e65bf8a8feb3f7e2b6c688ee2807adeae4d998f455a7dd78f026f9cfce672149804e12e60c5

  • SSDEEP

    384:76FCT0i97dTe/kCOyU7LUnpMD/Wn7rAF+rMRTyN/0L+EcoinblneHQM3epzX4NCy:2251CFU7LUa7W7rM+rMRa8NuaHt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:9876

Mutex

792c995af26c25375ff2f696b8be8453

Attributes
  • reg_key

    792c995af26c25375ff2f696b8be8453

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • uh.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections