Overview

overview

10

Static

static

10

TimeTravel...TE.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TimeTravel2.0PRIVATE.exe

  • Size

    37KB

  • MD5

    c0622865d16a983583fd648b788066ed

  • SHA1

    f186dd87ed741a70d36095e422249ddf913fd950

  • SHA256

    bd7cea2a6ca9838482956acdfb324911c9a96a6801a34221deb35ee3a7e04230

  • SHA512

    4664135eafd1daf50fd0e8684ca9e55898763d657745c2644ffd18a2638ba1ac8c45e71ec3c93b995ba11d34671bb8a9ff54e5c9ccd336082acdda62188ea88e

  • SSDEEP

    384:vD6rp7Lsik79zNf/1uyU77cPbxs2cPWrAF+rMRTyN/0L+EcoinblneHQM3epzXTm:mrRWl1lU77c1FcerM+rMRa8NuFit

Score
10/10
timetravel2njrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

timetravel2

C2

194.44.57.113:5552

Mutex

91137d4eb023a57c126288b3b00270ca

Attributes
  • reg_key

    91137d4eb023a57c126288b3b00270ca

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TimeTravel2.0PRIVATE.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections