General

  • Target

    43cceb8c9e39a9e64e33ea08321300dfde3fb3587b0ad8ed6d423f32c4e4a55c

  • Size

    29KB

  • MD5

    0a83f94e5fd7215ffa227251f2490f20

  • SHA1

    9b73e54b3491cb84dc6becc47de294f777129b25

  • SHA256

    43cceb8c9e39a9e64e33ea08321300dfde3fb3587b0ad8ed6d423f32c4e4a55c

  • SHA512

    769a9881f76a90904973e1b4ce8aa87888871cf773f5d540aea3b8a378f5feb05cd3f244e89fc7890248e892833e976979427e7bc21be3fc1f0693366fd10612

  • SSDEEP

    768:T7Xo4E3gcjTAqMBBeoBKh0p29SgRoC+P:T7XQ0pBLKhG29jR+P

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

يالله يامحمد ياعلي

C2

mamomamo.no-ip.biz:1133

Mutex

db410269cd2ab08de0b8d392883b995e

Attributes
  • reg_key

    db410269cd2ab08de0b8d392883b995e

  • splitter

    |'|'|

Signatures

Files

  • 43cceb8c9e39a9e64e33ea08321300dfde3fb3587b0ad8ed6d423f32c4e4a55c
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections