Static

static

10

Resubmissions

Sharing

Copy URL Twitter E-mail

General

  • Target

    sdaff.exe

  • Size

    37KB

  • MD5

    954cff0af66a0046de62bce3ee4b9279

  • SHA1

    7298755ae473850c72c9679bee4fa751c2268e54

  • SHA256

    2295f484c796a65de5602593e1eb91cfa575b5425a8ad6545546ec377a8fbbfc

  • SHA512

    f260bedcef14f087e42cd1d9056767eff66124492a01e5353663c4edacdb83c16994a40d8ac0d40b04e944f9a7dd296d4ab8933ae0ccc506aa2326e524028470

  • SSDEEP

    384:pNQCT0i9HdTe/kCOyU73oflQDXSikrAF+rMRTyN/0L+EcoinblneHQM3epzX8NrD:bVt1CFU73oSDSPrM+rMRa8NuGrt

Score
10/10
botnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

bot

C2

7.tcp.eu.ngrok.io:15023

Mutex

48276e2481ee276677f84282e7a5e46b

Attributes
  • reg_key

    48276e2481ee276677f84282e7a5e46b

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sdaff.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections