Overview

overview

10

Static

static

10

Tools.exe

windows10-1703-x64

10

Tools.exe

windows7-x64

10

Tools.exe

windows10-2004-x64

10

Tools.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Tools.exe

  • Size

    31KB

  • MD5

    d58d7060eaa816fef0544d8c3bed742a

  • SHA1

    6b347fedbf2aef28e615c3f8eac565b43b6d7426

  • SHA256

    df6cda60c379e4a8c8d7593ce01b0afadf1e449dd4bf430a63d057db3f686340

  • SHA512

    6e331d0edfe422371c9e0b4457d665e9c5a261361507035513da2047622e3405c90e4bd896f3c1fee6c9e62ad31283dbc4307a3310b40f5c35f6732087ab75d3

  • SSDEEP

    768:WzCfqdzNB0zx/6LmzmnAXdvAFQmIDUu0timFj:z6KjpAQVkzj

Score
10/10
dahellnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

dahell

C2

5.tcp.eu.ngrok.io:11358

Mutex

777046f27caac27080eff7c4da42fd04

Attributes
  • reg_key

    777046f27caac27080eff7c4da42fd04

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Tools.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections