General

  • Target

    857b856dd41413e01d3c0c66ccf588d4ea09fddeae2f88c6d12a3dc63437e6a2

  • Size

    1.4MB

  • MD5

    12790d8ab49b117e49200ba03947e814

  • SHA1

    7ac5978d67dfb1e2e9d819b09eeed1f4384650e1

  • SHA256

    857b856dd41413e01d3c0c66ccf588d4ea09fddeae2f88c6d12a3dc63437e6a2

  • SHA512

    07b581e557bf2e0c667caf0241bb9dee49b184852d49a0a5c5faf1032919cda8792d9c7f82a02c92bde18d763e6f3fb3b671758d9178c2eac65f238a6acb15cb

  • SSDEEP

    24576:syf+FQa+iNcXCnKv7B21o5j9mrtAcI4tdUlyeVEVniUGSa7DP3qmR3dxBwrn:sk+xNcXfLAJA/NoeVKiNVnPamPxBwL

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Muhammed01

C2

xcheater589.no-ip.biz:1177

Mutex

ba4c12bee3027d94da5c81db2d196bfd

Attributes
  • reg_key

    ba4c12bee3027d94da5c81db2d196bfd

  • splitter

    |'|'|

Signatures

Files

  • 857b856dd41413e01d3c0c66ccf588d4ea09fddeae2f88c6d12a3dc63437e6a2
    .rar
  • GeoIP.dat
  • Mono.Cecil.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Nj-Rat Config.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Plugin/Mic.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/cam.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/ch.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/fm.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/pw.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/sc2.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Stub.manifest
    .xml
  • njRAT.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • stub.il
    .ps1