General

  • Target

    ceedcb4203495d535bd16400f8fd7d81d228ca2189799b40da4528e34b673ea2

  • Size

    23KB

  • MD5

    f38f1083d479b4e13fbdd24d6607d992

  • SHA1

    915e0be86464f4b21c0ff521ac15000aced7d777

  • SHA256

    ceedcb4203495d535bd16400f8fd7d81d228ca2189799b40da4528e34b673ea2

  • SHA512

    5ecbe5237f7db8f322589cce7acd8f2af157c3feec06cbe7f3a93f18451f9577bcfc9610e0f208360f370bd8315a58f501310f11bbea45487e0ef5503d50db26

  • SSDEEP

    384:qluBPiZCMfdfSJrQbsLRGSIxYgL46Dg/i8BD9BmRvR6JZlbw8hqIusZzZQ25:9OmhtIfRpcnuw

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

PokerFPS.exe

C2

127.0.0.1:5552

Mutex

9b68e426e21849b5a892417de2a3d1a4

Attributes
  • reg_key

    9b68e426e21849b5a892417de2a3d1a4

  • splitter

    |'|'|

Signatures

Files

  • ceedcb4203495d535bd16400f8fd7d81d228ca2189799b40da4528e34b673ea2
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections