General

  • Target

    bFVu.exe

  • Size

    29KB

  • MD5

    718596cde20f78d5fc36b369daee4e40

  • SHA1

    731a961d5e11da0c8ee3d5c8912d2a102cfcd35f

  • SHA256

    67f23d59ebe35c4d4a243cdc4ac0b7f2363453fb76f240ae0a5e10d57d09ee78

  • SHA512

    16871b9f7d9dd74dd776283bdc2fc3ec01d65d32f9703a39aaca205b69cc2c6ab3a3964f7d06ebd9a5ed5caa285bbf92fbb59a0ecbd1215e20013d2bd95c2769

  • SSDEEP

    768:6Au75oa4fu9quqq+TxeeBKh0p29SgR1p:E75erzTpKhG29j1p

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

host3456h.duckdns.org:7000

Mutex

55b3825ee39ada2fcddf7c7accbde69e

Attributes
  • reg_key

    55b3825ee39ada2fcddf7c7accbde69e

  • splitter

    |'|'|

Signatures

Files

  • bFVu.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections