General

  • Target

    basketball.exe

  • Size

    37KB

  • MD5

    a722af2757ce5c254216b28683783dd0

  • SHA1

    7ddf465a9091e68bd11122833aefeee41e7c0fc3

  • SHA256

    af9473c55eb3bfcd2ce2cdd1232cb0a5495f086c4cf704f10e4318d5db82b855

  • SHA512

    9f95d955f372534189446df3737788315a6b5eec6e4a5203844198ff8bc2c6183c28fc85843291027a57ea3d410183929739db44165aa537e30188fccb6c59bf

  • SSDEEP

    384:PL0jqvEiTb7vpWNcZ0y8fXCPvff0LkaUJM0rAF+rMRTyN/0L+EcoinblneHQM3eq:ojqjTZ38fXCPvElUhrM+rMRa8NuYTt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:5552

Mutex

86e68607462d611b38f725df97456146

Attributes
  • reg_key

    86e68607462d611b38f725df97456146

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • basketball.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections