General

  • Target

    40a82c72795bb3cbf7dfdbdf4e23c808fc7ca6d932e487df58d7483c578ea79b

  • Size

    29KB

  • MD5

    5d068cd1a116de21d8aca911249b2c90

  • SHA1

    c625048c5e10759303f3eda7a42e7e502ae76570

  • SHA256

    40a82c72795bb3cbf7dfdbdf4e23c808fc7ca6d932e487df58d7483c578ea79b

  • SHA512

    06ba35d35a3ecd9e6ddc4cff81ef3d2a2978d60e84a743854c9f91b65790cbad0c82a659fe530c6bfca568beca86bcddd21e09b61711e9bdf544a670d1758a0a

  • SSDEEP

    768:K7JEWe4PVzdmBRbqELeuBKh0p29SgRBGq:K7JbhmBRblrKhG29jBGq

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

doinelumeu1234

C2

andrei24.no-ip.org:8080

Mutex

e79d569ba77562f0d4316e586835f0a2

Attributes
  • reg_key

    e79d569ba77562f0d4316e586835f0a2

  • splitter

    |'|'|

Signatures

Files

  • 40a82c72795bb3cbf7dfdbdf4e23c808fc7ca6d932e487df58d7483c578ea79b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections