General
-
Target
tmp/603fc39a-a94f-4607-a68c-cdfe8e403c95_1643.exe
-
Size
23KB
-
MD5
558d83545b3096f901e84dd00bccd9e8
-
SHA1
f8a62eb35a55307eaea56a4d689b1d9e68e303ea
-
SHA256
b7f5245002784627da1996be95b0e18abd73df0da01cbb268e39c5d39f04f4e8
-
SHA512
af4bcdb32071d2aef39fbe71f54466af07eb788ba9494af7f7937c93ac77cf341465bb733a0ba587f12606dc4c114d81293ae287f2041c8df0c3539bb3ce857d
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
COOOOOin
C2
facebook-sports.publicvm.com:1643
Mutex
c594020b32b858bc072fb76065d697d0
Attributes
-
reg_key
c594020b32b858bc072fb76065d697d0
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
tmp/603fc39a-a94f-4607-a68c-cdfe8e403c95_1643.exe