General

  • Target

    1452-57-0x00000000009B0000-0x00000000009BC000-memory.dmp

  • Size

    48KB

  • MD5

    3d0c9b1cbd007a79d0df93c6249a24bc

  • SHA1

    940e4787edaae8f71b10ae5574aa0267ec192341

  • SHA256

    ea1b0187bbd1a48bd632fddc7e2b367148e13827901cc06e10999a9b3baec8ef

  • SHA512

    4a9b6923ee468b45f05df607aa09f961ed262f3b4a5be5116d1335781c957edaecaf94513acc726b904241dc75b4ceb0a72d646f13674d4fa2da97d61664d2b3

  • SSDEEP

    384:ksqCm6yocx/Yp7jemiO0nd08/VQ6bgNQC5h7tmRvR6JZlbw8hqIusZzZxH:rSoQA6mlcrRpcnu2

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

easralahtane.ddns.net:3973

Mutex

de691f5a23326e1eca32cf33144b3175

Attributes
  • reg_key

    de691f5a23326e1eca32cf33144b3175

  • splitter

    |'|'|

Signatures

Files

  • 1452-57-0x00000000009B0000-0x00000000009BC000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections