Overview

overview

10

Static

static

10

06282cdd7f...bd.exe

windows7-x64

10

06282cdd7f...bd.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06282cdd7fa54ea991fba55a50f8d8bd.exe

  • Size

    85KB

  • MD5

    06282cdd7fa54ea991fba55a50f8d8bd

  • SHA1

    ba2cc621ce142888e001221b881f18dfdf971d16

  • SHA256

    5adacfc1a38f978177f6aa03d8e95e584d75e2cd614aa88a686678f50ec4e0d4

  • SHA512

    2a0fc3c07392ec03dbbb9b23910fec809266d185c73cbf02dc3fbfca5033d1218eb5be576a3852888afbf5a882b9df6d185d3c4a7394bcc113d584600b60f1d1

  • SSDEEP

    1536:NX1CKfcCqx+gRJNfxKGU4Q+GhjOwxLfUP0k6rM5cpGPaOK5e:NX4KEp+yJZxKGlYSwxLu0kc5sPe5e

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

hacked

C2

2.tcp.eu.ngrok.io:19294

Mutex

08e0b826461df6aaa32a19d4d44ad609

Attributes
  • reg_key

    08e0b826461df6aaa32a19d4d44ad609

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 06282cdd7fa54ea991fba55a50f8d8bd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections