General

  • Target

    Server.bin.zip

  • Size

    17KB

  • MD5

    2865b48c4036a5df570e850d34ff2fcb

  • SHA1

    f199bbb4be0f212fb867c2481be1b016dbb4fa37

  • SHA256

    7e0a04de4606954e63d8797d719a01d12fdc986e26719ae0bd97b20434855a69

  • SHA512

    5ca1fa70d99e07368b63def7eafff20743825f5b60257cb3cd9e43b1bce57d1e2798de6004af8aa584c9deeb9fcfa1582b2759280ddc5440e00c018c21c3a173

  • SSDEEP

    384:n/U2O21GTJ41TQfzlMX47Mqj8Ydt4TA5XjdG/u3:JOki6UZMIYc88MMXjMA

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

palat223.ddns.net:43486

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

Files

  • Server.bin.zip
    .zip

    Password: infected

  • Server.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections