General

  • Target

    23fe074ccd32bac701216b5f81d583ba.exe

  • Size

    93KB

  • MD5

    23fe074ccd32bac701216b5f81d583ba

  • SHA1

    6075305f1b9ab2e7d3b8e149172facf5ec73fb79

  • SHA256

    5654470b4d81928b27e0da33152476f9e47ccd8bd08a05a4e19dd44d075866d5

  • SHA512

    cb31b2a7f134a11ad0f9b84d8b1b7f688151effd6344ccd0dab591d8f200c9b37a208841a6aace9965c7c03ce3b3f740d71ef27c6ad92d1fc509825c7c218115

  • SSDEEP

    1536:/CmC+xhUa9urgOB9RNvM4jEwzGi1dDGD7gS:/CgUa9urgONdGi1dg0

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

0.tcp.eu.ngrok.io:19650

Mutex

7e677771686d4a1bd4e8405fa3adac08

Attributes
  • reg_key

    7e677771686d4a1bd4e8405fa3adac08

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23fe074ccd32bac701216b5f81d583ba.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections