General

  • Target

    23fa27b4b4a17fb9ec75c19455f6d6d64e099c115894c87248725e2295a1465c

  • Size

    24KB

  • MD5

    5b3257457cbaaf54f458ac56dbff06c0

  • SHA1

    d6fc6ca1235e264ed0b7700d3a22771cdf04fb73

  • SHA256

    23fa27b4b4a17fb9ec75c19455f6d6d64e099c115894c87248725e2295a1465c

  • SHA512

    5609cbf0027efe8ab2698e12b06a91e1da461b653542e9e299df18f12224f74f22b9d9b4ffae6fd5c0b177d506866188d6c6b25fa3ea10881836ea731a5db1a1

  • SSDEEP

    384:wBoWSkWHa55BgDVRGipkItzY6vZg36Eh7FtmRvR6JZlbw8hqIusZzZ/Eiu:w2Juk9pLRpcnumFu

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Syriano

C2

backtrack1991.no-ip.org:5552

Mutex

e6d3a7b2587c0fe8036c278db66f09a3

Attributes
  • reg_key

    e6d3a7b2587c0fe8036c278db66f09a3

  • splitter

    |'|'|

Signatures

Files

  • 23fa27b4b4a17fb9ec75c19455f6d6d64e099c115894c87248725e2295a1465c
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections