General

  • Target

    1690eb66ddd1e4ba483f30a6edeb31d5d946547d28b60351db456a7b472fd659.exe

  • Size

    29KB

  • MD5

    f57f1d8f893d352be2ae9e66b11ae570

  • SHA1

    a8f35447d15672bac3dfc6e60197f973c9943495

  • SHA256

    1690eb66ddd1e4ba483f30a6edeb31d5d946547d28b60351db456a7b472fd659

  • SHA512

    4f9b486604f689f985221f8b0351b24867d2a532f3684e5fcec018162709b6f296d5293ce8a689f983bc7d708723591f6eba161d7ddaa514438c98f169a95054

  • SSDEEP

    384:Ec6CqbFYh3odrVCGiHssDB4b6i6fgpEupNXRmRvR6JZlbw8hqIusZzZUejJKUh:TIU0tw3Rpcnu8VKU

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

DRIVER BEMATCH

C2

reserva01.duckdns.org:1176

Mutex

a46b4ada4ec7a34fd1a59d4429b6bcaf

Attributes
  • reg_key

    a46b4ada4ec7a34fd1a59d4429b6bcaf

  • splitter

    |'|'|

Signatures

Files

  • 1690eb66ddd1e4ba483f30a6edeb31d5d946547d28b60351db456a7b472fd659.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections