General

  • Target

    631249f7b1c83b42f9bc72ad42ef2e1d93c7513a48427fbcd92019cf42be49a5

  • Size

    29KB

  • MD5

    512b9a5f3390216acfef549ded87b880

  • SHA1

    c577f9e1fcf19c3be8f68272abce93ed12b4528d

  • SHA256

    631249f7b1c83b42f9bc72ad42ef2e1d93c7513a48427fbcd92019cf42be49a5

  • SHA512

    52ff0440b22b4aa0a6643d6b1d1ba807685b3abba5ffaad76b11cfc09502d6557e14f0f30cca5100264b4adbda6a7091b2fd6d06e0a9fdc434a220261a101cf2

  • SSDEEP

    384:0gJGJl7tj1Msagab1h5Vh+2CWmqDebD59ePbGBsbh0w4wlAokw9OhgOL1vYRGOZS:A7nMsanzR+2cqEDveyBKh0p29SgRUv

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

MR.Death

C2

qqw879.no-ip.biz:1177

Mutex

5cd8f17f4086744065eb0992a09e05a2

Attributes
  • reg_key

    5cd8f17f4086744065eb0992a09e05a2

  • splitter

    |'|'|

Signatures

Files

  • 631249f7b1c83b42f9bc72ad42ef2e1d93c7513a48427fbcd92019cf42be49a5
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections