General

  • Target

    407db91b4d0b0fb62de83a36f32641a7dd99517e09bce67794b472a930c760cf

  • Size

    230KB

  • MD5

    6c38259b5ece98e227e7d5cd396fa3d0

  • SHA1

    c9a1fd4d5551494daa416bdeeb9117b49c89092f

  • SHA256

    407db91b4d0b0fb62de83a36f32641a7dd99517e09bce67794b472a930c760cf

  • SHA512

    82212ebcef256a93f7b16af9d0513d9fb3c26825682792e4e35e5bff7a5c8e0e90bd95f5a471aeb55b6df0e39c66b06b7c3f54efe372483d885c4a2d2d02afc6

  • SSDEEP

    3072:CNrpg6Z+yJx2Gnilp5YgIQWUn3FFIGOgRd+yuRyZhT:4rpg78niT3F7

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

xuycocu

C2

xatabomsha1470.ddns.net:4646

Mutex

8b43d0ebdf1194096535a79e32c6e582

Attributes
  • reg_key

    8b43d0ebdf1194096535a79e32c6e582

  • splitter

    |'|'|

Signatures

Files

  • 407db91b4d0b0fb62de83a36f32641a7dd99517e09bce67794b472a930c760cf
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections