General

  • Target

    ec316f5ccd80c60ea9f5dd16d203a59e78f8dc2f43319a1f7f57766bcf7fc6b4

  • Size

    27KB

  • MD5

    a8027c6bf42393de8d926204b0a1a8dc

  • SHA1

    b698cf703be7b6c2f5655c502ba8203657f00da8

  • SHA256

    ec316f5ccd80c60ea9f5dd16d203a59e78f8dc2f43319a1f7f57766bcf7fc6b4

  • SHA512

    40f4ec565f57cf12b19ce615543a610cceddc88110f5786fc483ebf1f7462da489a357316d8aefb9278c894bcc40330e99c8c79ad8f5e1537844f0ad1df14792

  • SSDEEP

    768:g3Xt2hV7tTG+Fg46sJOaZcFWQaEwtSocVMHcN70p3:o2hV5TvFvvU58QGcV3NAB

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

someOne

C2

85.253.176.179:1604

Mutex

Java update

Attributes
  • reg_key

    Java update

  • splitter

    |Hassan|

Signatures

Files

  • ec316f5ccd80c60ea9f5dd16d203a59e78f8dc2f43319a1f7f57766bcf7fc6b4
    .rar
  • FortPathes.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Перед_запуском.txt