General

  • Target

    1996-55-0x0000000000250000-0x0000000000262000-memory.dmp

  • Size

    72KB

  • MD5

    24074a9fd679a08b7d1c77667d74d950

  • SHA1

    39143f282dc48b03e39794a6b66653eefb1fb798

  • SHA256

    76bbd0fd29acc9b21e2467ef06cd624020091cc73761c11907f66f54de94110f

  • SHA512

    ec22829ae9b7f284f4e528879cb06ece21c16f02efbe151af34e634fdeb8031098d83add7691db5cc8168dd7cb3bcc48afefebc58247c503f859f9f023f30ff4

  • SSDEEP

    384:YZyZUJ1Cj8syWcWrf7E5GiXeEXME5EAftz8Iij+ZsNO3PlpJKkkjh/TzF7pWn9/V:u8UJ04pWcWr7E5ZVMEzXuXQ/ocX+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

0.tcp.eu.ngrok.io:12329

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

Files

  • 1996-55-0x0000000000250000-0x0000000000262000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections