General
-
Target
d5781a48e80bba55734aa4a55e88e7b29a5409c6bf1fb85facbd19bc19ff2191
-
Size
37KB
-
MD5
79947256a4b2aeefc5c470b820c536aa
-
SHA1
bd36323492859a67dc291f061a14bc6e3dc3fb30
-
SHA256
d5781a48e80bba55734aa4a55e88e7b29a5409c6bf1fb85facbd19bc19ff2191
-
SHA512
c6a9dfa6cb1296241d2f643ebcb8d542099af63aa414f65890265da2f762001c134cb16ef53439699c8f8aef9ee47fbfc12128ab52c28d1dc2b45405cf36c137
-
SSDEEP
768:BYkkE91twjr7Svml0hIrM+rMRa8NuDUt:BYkkE91OjyvmihT+gRJNs
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
HacKed
C2
2.tcp.eu.ngrok.io:19236:5552
26.249.47.111:5552
Mutex
c1b2d5c68b1ab0f211d2c7613c6dfc6e
Attributes
-
reg_key
c1b2d5c68b1ab0f211d2c7613c6dfc6e
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d5781a48e80bba55734aa4a55e88e7b29a5409c6bf1fb85facbd19bc19ff2191
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections