General

  • Target

    64827ef4f067536855cba4035d6bcd214a8ea3a09a1e9a00a72c2cea9fe64a0b

  • Size

    29KB

  • MD5

    84bde0223462ac4be97527abdae162a0

  • SHA1

    60467ce1a8e5d9ca878b02c37c2f625b81dcd532

  • SHA256

    64827ef4f067536855cba4035d6bcd214a8ea3a09a1e9a00a72c2cea9fe64a0b

  • SHA512

    d77964d70dc6b80084c718c3a690e838b82c04eb22ce4edffc0c5cb2291f4fe0412e0f1dddec552a632ad8000cd25f5b36a741b1c0258faf8cc080529fbaf50a

  • SSDEEP

    384:j8EBl7Bvgk4Xe0elD5FochNGem/DUb3neUEGBsbh0w4wlAokw9OhgOL1vYRGOZzG:/7Kk4XePlFXY/4bneWBKh0p29SgRMb

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

НОВЫЕ

C2

niks123.no-ip.biz:777

Mutex

0834daba34fc76fcb705a66b2338d64f

Attributes
  • reg_key

    0834daba34fc76fcb705a66b2338d64f

  • splitter

    |'|'|

Signatures

Files

  • 64827ef4f067536855cba4035d6bcd214a8ea3a09a1e9a00a72c2cea9fe64a0b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections