General

  • Target

    4b54e7e3f754a52d0ed013cd376c069bfdb9e457d134d862b4303691cab03849

  • Size

    37KB

  • MD5

    b98d25a30a0472eea9a8ead6009a853c

  • SHA1

    e91b5cfbe442299bf72924422e856424087e9a7e

  • SHA256

    4b54e7e3f754a52d0ed013cd376c069bfdb9e457d134d862b4303691cab03849

  • SHA512

    4c6ddeddc304ebff72846d115c63f9fe8889f11b44ec5623da22628b5ba258b5b716a02c6722ca483dd466f09db5eea2201af2af8837bc886b9b89c4d4c90314

  • SSDEEP

    384:QTNkooixJLl7OHg1WykrzffL+8GcPE0rAF+rMRTyN/0L+EcoinblneHQM3epzXWx:OkeR1NkrzfSFcvrM+rMRa8NugTt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

shareman.exe

C2

ayezhiznboram.ddns.net:6344

Mutex

4bdbd1da64cfae6714664f169be7c0ed

Attributes
  • reg_key

    4bdbd1da64cfae6714664f169be7c0ed

  • splitter

    |'|'|

Signatures

Files

  • 4b54e7e3f754a52d0ed013cd376c069bfdb9e457d134d862b4303691cab03849
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections