General

  • Target

    c824b1407eab554a33e276188d131a89a036ba485309a898c97c81d8c746e12b

  • Size

    23KB

  • MD5

    7291aa681d6ae804d771c3a929a3d0d0

  • SHA1

    69b191d1797dead674edbf347d756f67fa7d703a

  • SHA256

    c824b1407eab554a33e276188d131a89a036ba485309a898c97c81d8c746e12b

  • SHA512

    e09c4d610a9cc8c84eedb4e475c9815aaf8bba4b015b6d12cc2545b2c5d7f667ba44d8e2503e9515c55bb538f393bef37b4f7c00e8cacf798cb8330eb749cdd3

  • SSDEEP

    384:QqdL28Ckm3wmCSGfie0OAeA6cgycJbAFWmRvR6JZlbw8hqIusZzZThEvFo2:QSc06e+Rpcnu2ONo

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

اٍّلَّشّْمُّاٍّسًّ اٍّلَّاٍّخٌّيٌّرًّ

C2

1987.no-ip.biz:4442

Mutex

38e7b45ce9635619055494fdf9be07e7

Attributes
  • reg_key

    38e7b45ce9635619055494fdf9be07e7

  • splitter

    |'|'|

Signatures

Files

  • c824b1407eab554a33e276188d131a89a036ba485309a898c97c81d8c746e12b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections