General

  • Target

    Encryption Server njRAT 2017.exe

  • Size

    287KB

  • MD5

    c29c01fd8b8fddee3f40a131a036ef31

  • SHA1

    fa56b614fa2ba5a81a38d7a9eece01f38c0c126d

  • SHA256

    bb2e29a5e2be5a91fed1de0164682f7dff2cfffbe26817e5637081a4f2bb2b51

  • SHA512

    f7768e406ae62f921a0b1f0db350872523b82e8bf7cb3894f087529eb9631b35ffcd6f0892978d8758aa95165a0d7625c3a667d37c9dfb9ec12e3424b2587ea0

  • SSDEEP

    6144:JBX0hthoOlmZ3DvDca8+Esb4tAjQEZroBX6ejbNV:z0hthoOG3Db38+Esb4tAjQEZroBqejj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

SnapCHATer

C2

tosson.ddns.net:1177

Mutex

d543a6aeb6b27dc0c9c77edb46d56833

Attributes
  • reg_key

    d543a6aeb6b27dc0c9c77edb46d56833

  • splitter

    |'|'|

Signatures

Files

  • Encryption Server njRAT 2017.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections