Overview

overview

10

Static

static

10

dd9db3ce85...aa.exe

windows7-x64

8

dd9db3ce85...aa.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    19159c6d912eec19d4a91fa9eae85dae.bin
  • Size 16KB
  • Sample240612-bg4cdaxcnm
  • SHA256 83b84829f0a3a45ade8148f0bc3cb6b57a4cb41b31dd317b99f5466c3b474d4a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
swatnjrat

Malware Config

Extracted

Family

  • njrat

Version

  • im523

Botnet

  • SWAT

C2

  • 0.tcp.eu.ngrok.io:19926

Mutex

  • ec391e7c68470235ae5aa8a1e5e0be35

Attributes
  • reg_key

    ec391e7c68470235ae5aa8a1e5e0be35

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 19159c6d912eec19d4a91fa9eae85dae.bin
    .zip 16KB
  • dd9db3ce85e04785fc2e509c534f00ed5e5bf42254a282a641f9c8c1a0a535aa.exe
    .exe 37KB

19159c6d912eec19d4a91fa9eae85dae.bin

  • SHA256 83b84829f0a3a45ade8148f0bc3cb6b57a4cb41b31dd317b99f5466c3b474d4a
  • MD5 SHA1 SHA512 SSDEEP
Password
infected