Overview

overview

10

Static

static

10

0c2672ab64...ac.exe

windows7-x64

8

0c2672ab64...ac.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c2672ab64b9a27db6ea9d7fad042cac.exe

  • Size

    37KB

  • MD5

    0c2672ab64b9a27db6ea9d7fad042cac

  • SHA1

    cf5359241c6a9dc7f823663b3f168556cd9f06ee

  • SHA256

    adc32806bb56fd0df1d594e6274ff3c3735fb588e79a721033cef322c01b65be

  • SHA512

    81612e7c58a288a9eecaf139eb154d24726f7ac5784fe7b28b48b11416a5de5c5669a1405f1b97c944392401b4219c9ee7ce52c02b0130bb9e51443a36e7c586

  • SSDEEP

    384:HmOs0IiejvCVLO309QmykrtG+dA+VfwvOSiKrAF+rMRTyN/0L+EcoinblneHQM3z:9FdGdkrgYRwWS9rM+rMRa8NuUgQt

Score
10/10
moneynjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Money

C2

0.tcp.eu.ngrok.io:10869

Mutex

67ba5033f2413b133f2bccd19ae7f909

Attributes
  • reg_key

    67ba5033f2413b133f2bccd19ae7f909

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c2672ab64b9a27db6ea9d7fad042cac.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections