General

  • Target

    05f86a267474228523ef5e9a5f05e00c.bin

  • Size

    23KB

  • MD5

    05f86a267474228523ef5e9a5f05e00c

  • SHA1

    c688bf926d13d9437f1b153d338d1071ef4f0da9

  • SHA256

    cbfb31ab9f66f631ffc54abe2c46c44ca64456f3e15a3a44c4117ebd3d208a8d

  • SHA512

    a0d46efb08fa1e768df1145ea4fa4d0ce26ff7d1e64535cd4afd2db256a778d2f31152044ed62bbcc53d3615590b461641f2d8ca68d209ec13feed47baa019bc

  • SSDEEP

    384:4cqbCK0l4h7o9SVyDGvENuh46/gJkOmMSW38mRvR6JZlbw8hqIusZzZ+W:H30py6vhxaRpcnuS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

caly

C2

reserva01.duckdns.org:1182

Mutex

0774bfb60a53c36c2bdece08db35ff3f

Attributes
  • reg_key

    0774bfb60a53c36c2bdece08db35ff3f

  • splitter

    |'|'|

Signatures

Files

  • 05f86a267474228523ef5e9a5f05e00c.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections