Overview

overview

10

Static

static

10

sosi_biby.exe

windows7-x64

8

sosi_biby.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sosi_biby.exe

  • Size

    37KB

  • MD5

    e11aa2c789dfd4b10e77090c4c3e448f

  • SHA1

    ea62417c208415661cbcace3984f493f55eedaa8

  • SHA256

    61f6d97939e73cf2a5c172bd2a19ae50e5b4c76fb5426cb30d062e1a0bc5071d

  • SHA512

    17ce670b5a814a5181a74fee69dccd44bd0be55dc53650f0374e8bd503066a4eec10bfe503d3ad11ad845575ebb0bcb3fda2eaf23100aa8f6adc86677d33857f

  • SSDEEP

    384:fW/gUiDrblmJEpRGyEfdDPTuWCYqAlLrAF+rMRTyN/0L+EcoinblneHQM3epzX9J:e/yHpR9EfdDCWClAprM+rMRa8Nu/vzt

Score
10/10
noobnjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

noob

C2

6.tcp.eu.ngrok.io:17297

Mutex

612b5654a765e68b788c9882725c66ac

Attributes
  • reg_key

    612b5654a765e68b788c9882725c66ac

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sosi_biby.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections