Overview

overview

10

Static

static

10

timetravel_196.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    timetravel_196.exe

  • Size

    37KB

  • MD5

    c8991e62173876f9cc788cf2367cca03

  • SHA1

    1406dd5d460aa57e9906e657b6d33100aff02af3

  • SHA256

    47de28622f56ea992236ed35d342d4582597aa5fdac1db3018c50d3730114863

  • SHA512

    1d552c09a59cd945a384443765f6f55ba1171dd3c4cf954ccd432524eb359c83b60ccecd2610d1028f0e1c7d80caf6c6bd5d732a8d5cf2f5a85ec922aae5ec43

  • SSDEEP

    384:ED6rp7Lsik79zNf/1uyU77cPbxs2cPWrAF+rMRTyN/0L+EcoinblneHQM3epzX2j:hrRWl1lU77c1FcerM+rMRa8Nught

Score
10/10
timetravelnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

timetravel

C2

58.188.252.80:5552

Mutex

b4797398209f692b2214137fe4bbceb8

Attributes
  • reg_key

    b4797398209f692b2214137fe4bbceb8

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • timetravel_196.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections