General

  • Target

    c29cf232b6a013e31e2a2bd9f3b8dac2032c22562c7e76ec4b84276405b2df45

  • Size

    48KB

  • MD5

    93be89c86b4bab424fe859bf4a744430

  • SHA1

    477fa6d62e06ed86122f1aceff040f1ae44c3882

  • SHA256

    c29cf232b6a013e31e2a2bd9f3b8dac2032c22562c7e76ec4b84276405b2df45

  • SHA512

    61e43c517e1c40277e16e1fc594b0a517fff4826aab04ede42894515d35a0277c91f0c8cd283d23bf70226dc0bc806ca9624089ef92090e656e6438244448276

  • SSDEEP

    384:HMK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZ+/E:Ab9glF51LRpcnuI

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

20/09/2014

C2

host0404.ddns.net:1177

Mutex

ce46dabde82f0a2012cbaf2961f39912

Attributes
  • reg_key

    ce46dabde82f0a2012cbaf2961f39912

  • splitter

    |'|'|

Signatures

Files

  • c29cf232b6a013e31e2a2bd9f3b8dac2032c22562c7e76ec4b84276405b2df45
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections