General

  • Target

    db7e41ad958ee52cb6257330e55b25f8e9314d89719c78b524e8b76025d2252e

  • Size

    43KB

  • MD5

    71152f3b9a20b6bdf15451f7fefceeb5

  • SHA1

    f1bfb4bbf23866b97cee0fb39895f365377003e9

  • SHA256

    db7e41ad958ee52cb6257330e55b25f8e9314d89719c78b524e8b76025d2252e

  • SHA512

    1efcb54168dd7abeefd5fd74147d86d8131ccb75c70b4c24673af88df4781577d31278ea8148ad061fc1177e5f9f71bdbc31e5528b7b5067ced19467bce36fb7

  • SSDEEP

    384:IZy7dCxrmvYUy/fHiZN1cWMMr6BHwlS9D9O5UE5QzwBlpJNakkjh/TzF7pWn5Cgy:+bYgh3HcNea6NKvQO+Y6+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

???

C2

127.0.0.1:6626

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

Files

  • db7e41ad958ee52cb6257330e55b25f8e9314d89719c78b524e8b76025d2252e
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections