General

  • Target

    aeaeae.exe

  • Size

    37KB

  • MD5

    972ec1c79c45582f8207da0bf400ebb9

  • SHA1

    e6a782b4326a81cec3874fbd853ae7ddf6e6bb5e

  • SHA256

    aaed740122b78fc3818413cc03e45c881dd6c3369993f99054987c7fbd8e355e

  • SHA512

    a05a4ad345d7742f62ed5e81da12f1f8c2f32302c58c32207f24a62431a6c45a1bf73a35b5342879c90ba596537e8979b2854a265bf4398d63820980c117777b

  • SSDEEP

    384:SgEtgswi+Tx3+j/NSyszKCgv7y3mcjarAF+rMRTyN/0L+EcoinblneHQM3epzXCE:FEqlCNhszKCg+WcGrM+rMRa8NuAst

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:17739

Mutex

e733eb3adea6a3708ff7111956b58f0c

Attributes
  • reg_key

    e733eb3adea6a3708ff7111956b58f0c

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aeaeae.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections