General

  • Target

    cookie_generator.exe

  • Size

    37KB

  • MD5

    370a7d0e4d5991cc5ca44e6c421d162b

  • SHA1

    e51da1016044711546cf1a2997e4d6bd8e073902

  • SHA256

    0ef357846c7f3414e754946e94a09006588ba6a74095eb6e00d06b5a59ef8860

  • SHA512

    b376a6a569e3fe24e0537ca60078cfcee8a2ac14a85966622982a543fc7c47981c2c9b48bffb7ef6826f9e880d4f85de888287ea9325ed982c4abbf3c637c379

  • SSDEEP

    768:9nRANVdhKrVfKPLBkorM+rMRa8NuEdtN:9nRANVvKpfKPL2z+gRJNr

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Bobrochila

C2

7.tcp.eu.ngrok.io:17829

Mutex

ff926029c90971f5c0aedf5487c0b060

Attributes
  • reg_key

    ff926029c90971f5c0aedf5487c0b060

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cookie_generator.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections