General

  • Target

    b66f4a9eec67bd4eae0b1a8d00bf27139599fd5ebef4f256edabe4bd64de5b71

  • Size

    24KB

  • MD5

    4de846e8d360e2e17e31ec1f25c945d0

  • SHA1

    2a28e742c7009dc1011dd5e342f8973810733f00

  • SHA256

    b66f4a9eec67bd4eae0b1a8d00bf27139599fd5ebef4f256edabe4bd64de5b71

  • SHA512

    5db4983717b2a39c1cda0f0584ad1b1227d943083f1c943ed453e6f95f6b76e47040daf9c7acc0570377dab620682444558c6fcbf1528b6ad161667ab3aba6fd

  • SSDEEP

    384:aTz64O1Lyj/ZFOwXzkeiyawR/w6lgT+lLOS88WmRvR6JZlbw8hqIusZzZ2TCU:iYUxFK1yRL7RpcnuKU

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

احمد نديم ابو خرا

C2

vardarkdevil.redirectme.net:1350

Mutex

98051be4d7f64a03bed74d6b77d47378

Attributes
  • reg_key

    98051be4d7f64a03bed74d6b77d47378

  • splitter

    |'|'|

Signatures

Files

  • b66f4a9eec67bd4eae0b1a8d00bf27139599fd5ebef4f256edabe4bd64de5b71
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections