General

  • Target

    6c73ef4614ab4fdcba123ccd92bfb4e0N.exe

  • Size

    37KB

  • MD5

    6c73ef4614ab4fdcba123ccd92bfb4e0

  • SHA1

    2ce45bbca12c7cbec5a45588d36f766687a0b542

  • SHA256

    1333f80c54cdb10cf31edd547378ce60d6a4a3d877d17d99102582d19765296f

  • SHA512

    1987a13af7b8ede61d32d4f8b71aeb76835d345cedee7066e6703d762a3d541ab38d47ee28a9350e4a1ffb5386563fd54253b01a611121bc7448c6ddacd78f49

  • SSDEEP

    384:XmIeQilahHeTnMGiyMTTmHt0jPSitrAF+rMRTyN/0L+EcoinblneHQM3epzXMNrn:HNSMGxMTTmOrSarM+rMRa8Nu2Tt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

2.tcp.eu.ngrok.io:18688

Mutex

b408a2c971c7128fda18c3a7170d31ae

Attributes
  • reg_key

    b408a2c971c7128fda18c3a7170d31ae

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c73ef4614ab4fdcba123ccd92bfb4e0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections