General

  • Target

    3767212cd6e3c3a143ce0938cb549e9ac68d1b2a8c62c3b279765174aa6c3fb0

  • Size

    40KB

  • MD5

    62d11598165fe107ad52400cadd30f90

  • SHA1

    12a6ad36d66fef8016586fba47d9a18b29be93c1

  • SHA256

    3767212cd6e3c3a143ce0938cb549e9ac68d1b2a8c62c3b279765174aa6c3fb0

  • SHA512

    1d5b581f00fb05451a61aa1419a5179844043338400287afa1f01a1405a74b65887c7ce2a2819fde033b3234bd7816028a8e4ea03e4c6a11d019d9defcdd5d05

  • SSDEEP

    384:hluBPiZCMfdfSJrQbsLRGSIxYVL46pg/i8BD9BmRvR6JZlbw8hqIusZzZeRpmamC:2OmhtIiRpcnuRnmcqaFXI2XPx/t4o

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

secret

C2

markwawy.no-ip.biz:1212

Mutex

ebd70f902863804afb75e2d0f3cc62a1

Attributes
  • reg_key

    ebd70f902863804afb75e2d0f3cc62a1

  • splitter

    |'|'|

Signatures

Files

  • 3767212cd6e3c3a143ce0938cb549e9ac68d1b2a8c62c3b279765174aa6c3fb0
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections