General

  • Target

    1364-55-0x00000000002B0000-0x00000000002CA000-memory.dmp

  • Size

    104KB

  • MD5

    c54c9ad25286efd4590998dd452f7d1a

  • SHA1

    c5c09315da11a33e3383a86ade5a07ea1fed08fd

  • SHA256

    71f869e2a3736f041c45d5b820b37c40a825a367d654978d6bc00bb741899834

  • SHA512

    50a29109a80ac04edb9f3e9745a094b4066173b7b2480c108af17db25324f5103040bfcb7485510ad478c0568210224b105ca0fbcbb7f3e616938e1ad069b82a

  • SSDEEP

    1536:UGa+efzGj1RwVTqMDp8S5wpOk3JCK6pFo4jM6fOpd/9nEh9TG8J8Rg:0zCQwpOk5CK6hO/9ES8J86

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Lime

C2

assessment-epinions.at.playit.gg:24620

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    123

Signatures

Files

  • 1364-55-0x00000000002B0000-0x00000000002CA000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections