Overview

overview

10

Static

static

10

1712-67-0x...ry.exe

windows7-x64

1712-67-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1712-67-0x0000000000400000-0x000000000040E000-memory.dmp

  • Size

    56KB

  • MD5

    aaa94032f965dabee7037e6c23914ca0

  • SHA1

    dfcd0abbfb0a4f9289e64b492d54fc38fe7c700d

  • SHA256

    9a44a85961e5c40a9e4f2fc49691c38f18092ce6b937b20b297c58b6dd9ca1bd

  • SHA512

    e5a55a25f2a4a45288723470ead53bac3883bf9d80b20a60c29f7a1669cac78f4a7236947c3507f7f75de7befe34d4592fddc2bcceb0bc27c5c5267133390176

  • SSDEEP

    384:WLEBFhM7OA0102PgPGC+YPFhh/MxAQk93vmhm7UMKmIEecKdbXTzm9bVhca36BrZ:QQFXc2EExA/vMHTi9bD

Score
10/10
updaternjrat

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

updater

C2

alexanderhk228.hopto.org:4432

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

Files

  • 1712-67-0x0000000000400000-0x000000000040E000-memory.dmp
    .exe windows x86


    Headers

    Sections