General

  • Target

    68120bc1bfad5bfb4db9fd7c66a40fe09ca69ea8dcff8db544dae06eff4181da

  • Size

    76KB

  • MD5

    400ef66cb416d25ef5c2e4ef380a3b70

  • SHA1

    9c11e16ab6fa345e526041d8c3df46c033907b49

  • SHA256

    68120bc1bfad5bfb4db9fd7c66a40fe09ca69ea8dcff8db544dae06eff4181da

  • SHA512

    e0852beb5688b8c327d55d9ef03086eb78c2403d22c2d60c3f7ee176b4e69076e2398011d6cd65fe9216ed8b945eb81666ce399baaa06c06c18cb5c0f83b4501

  • SSDEEP

    1536:j5yBH7RWuoxUgAyRrei6s9zvtwVd9BAWxWPqQFRm7+RhH:1yBb0TLRrei6s9pIApH/m7+RhH

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

ghilasjsmb.no-ip.org:1177

Mutex

cc718d3c5e056abaf9546778e7bc8cd6

Attributes
  • reg_key

    cc718d3c5e056abaf9546778e7bc8cd6

  • splitter

    |'|'|

Signatures

Files

  • 68120bc1bfad5bfb4db9fd7c66a40fe09ca69ea8dcff8db544dae06eff4181da
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections