General

  • Target

    d1c2db6ca0d3076346ecd9419eab492e2f16c927957e82998c7bd21af5df030b

  • Size

    23KB

  • MD5

    0d7abf4e02672f949beda2db05e2da80

  • SHA1

    d300c3579b8aac11938d2beb2fbd926c1fceea6d

  • SHA256

    d1c2db6ca0d3076346ecd9419eab492e2f16c927957e82998c7bd21af5df030b

  • SHA512

    2e87e9691ec4bc4a9c67cc32a54dd4932ee80ee7f4b2333380e294aab8f68c33a99a4ae90b2e6550bc8a35410ac5fbc9bfbd08c54f49d3b05fe3bf7afd627e21

  • SSDEEP

    384:T8aY1ia0N/IH+WUiWiLcXyUTly2Rc87po6ngB8W+tqlf5mRvR6JZlbw8hqIusZz9:61Re/E+WUiW6ci6NR7tZRpcnuU

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

(((**NO CLEAN**)))

C2

xtremerat2016.no-ip.biz:1177

Mutex

e844d729405d2738eb091dc9da781262

Attributes
  • reg_key

    e844d729405d2738eb091dc9da781262

  • splitter

    |'|'|

Signatures

Files

  • d1c2db6ca0d3076346ecd9419eab492e2f16c927957e82998c7bd21af5df030b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections