General

  • Target

    8ee5901e793a7fd23b84b5c8c3133730f40add0e2723ccd1ea066a72fdc9ad84N.exe

  • Size

    37KB

  • MD5

    63646257033a6df3325b6b24e3051680

  • SHA1

    fede036f9204b51561aa302364e87efd62f20fea

  • SHA256

    8ee5901e793a7fd23b84b5c8c3133730f40add0e2723ccd1ea066a72fdc9ad84

  • SHA512

    895e6e24081e370baa3232040f06333fd8bc9437ee8374b415a5dd8b94ccbd84eae5e26c222006a442ff01a46d83e0ecf6263501df2fae2eb6dedfa1612ca028

  • SSDEEP

    384:NIROIiuPjtD+P3V+y0b1gBUtPr2s2Mf/rAF+rMRTyN/0L+EcoinblneHQM3epzXV:iRnmV10b1gBUt6lM3rM+rMRa8Nulbt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

game

C2

6.tcp.eu.ngrok.io:13739

Mutex

86e44710278beb6caa0bbd364fe8064e

Attributes
  • reg_key

    86e44710278beb6caa0bbd364fe8064e

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ee5901e793a7fd23b84b5c8c3133730f40add0e2723ccd1ea066a72fdc9ad84N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections