Overview

overview

10

Static

static

10

dd9db3ce85...aa.exe

windows7-x64

8

dd9db3ce85...aa.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd9db3ce85e04785fc2e509c534f00ed5e5bf42254a282a641f9c8c1a0a535aa.exe

  • Size

    37KB

  • MD5

    19159c6d912eec19d4a91fa9eae85dae

  • SHA1

    f50ca803f5ec4b855ab562dfb4aa2f68cacbdc1a

  • SHA256

    dd9db3ce85e04785fc2e509c534f00ed5e5bf42254a282a641f9c8c1a0a535aa

  • SHA512

    3974e18f26136bd919f2cf0c0b37b3f02c1bc3a78e68c4b0e0a2e141448c5e3e4726b763581b70c8299690ac5bfc2659473267e855ef31d04e587ee35c6fd8b7

  • SSDEEP

    384:e0SvEiTbTvpWNcZ0y8fvCv3v3cLkacpjrAF+rMRTyN/0L+EcoinblneHQM3epzXB:5S7TZ38fvCv3E1c1rM+rMRa8NudXt

Score
10/10
swatnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

SWAT

C2

0.tcp.eu.ngrok.io:19926

Mutex

ec391e7c68470235ae5aa8a1e5e0be35

Attributes
  • reg_key

    ec391e7c68470235ae5aa8a1e5e0be35

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dd9db3ce85e04785fc2e509c534f00ed5e5bf42254a282a641f9c8c1a0a535aa.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections