Overview

overview

10

Static

static

10

39634c58a4...cs.exe

windows7-x64

8

39634c58a4...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39634c58a402c2e0cd8b8bef363d5080_NeikiAnalytics.exe

  • Size

    37KB

  • MD5

    39634c58a402c2e0cd8b8bef363d5080

  • SHA1

    cd72069292ba6e9cdc50c0fa686fbe9d0a095752

  • SHA256

    3ab9ee9caae8728cee7042528893ee671d18017abcf84d44c4a177a270eb49bf

  • SHA512

    09dcf1b8d4d55bfe931f69eaa127bb092fddb9ee36f33fa20810b58278d1f523085016b64529f928766bba52fb6bb703739d2c253e939788fe0e1e6e3b2c9030

  • SSDEEP

    384:w0SvEiTbTvpWNcZ0y8fvCv3v3cLkacpjrAF+rMRTyN/0L+EcoinblneHQM3epzXv:TS7TZ38fvCv3E1c1rM+rMRa8Nudht

Score
10/10
swatnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

SWAT

C2

0.tcp.eu.ngrok.io:19926

Mutex

ec391e7c68470235ae5aa8a1e5e0be35

Attributes
  • reg_key

    ec391e7c68470235ae5aa8a1e5e0be35

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39634c58a402c2e0cd8b8bef363d5080_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections