General

  • Target

    9ba1e26f3ad65e819c9aee497c300dd409404eb0ff95ebb52e2b84a16f6fa72d

  • Size

    24KB

  • MD5

    6dbe4763865f2cee1de18ccfb951f760

  • SHA1

    208536dd5651b31713be5a82b55da161572e9e1e

  • SHA256

    9ba1e26f3ad65e819c9aee497c300dd409404eb0ff95ebb52e2b84a16f6fa72d

  • SHA512

    34359d641ffae898b49416a7a64000ebd21e82019d3b3929407740812dc39bb3d3c8b9ec227aa49fcddacdebb2a720d86e9ce086789fa6bd8268d4cd2d48bf7e

  • SSDEEP

    384:V8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZpFq:dY+sNKqNHnSdRpcnuh

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

6qo

C2

msn-web.ddnsking.com:1177

Mutex

f84d952969f9664196d2247aa090ba71

Attributes
  • reg_key

    f84d952969f9664196d2247aa090ba71

  • splitter

    |'|'|

Signatures

Files

  • 9ba1e26f3ad65e819c9aee497c300dd409404eb0ff95ebb52e2b84a16f6fa72d
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections