General

  • Target

    cf380595e45b974557b1d1e3eac70acd12d8cb3e3b349849925379927d6a3eb6

  • Size

    29KB

  • MD5

    c108e76fdae43d19323cb381a8505198

  • SHA1

    5f9211590f246a319795090542e69b5c7c77cb91

  • SHA256

    cf380595e45b974557b1d1e3eac70acd12d8cb3e3b349849925379927d6a3eb6

  • SHA512

    8497b1a4d7e06545c59b62784586c892f230da831575c3b7d6d0ebbb8cb550f1ce5b22adfc73edd8c490379003c1f9fd91d54bf3c993becaa8780777c7e03df9

  • SSDEEP

    384:uzwIpl79TbsiKQ1lZl5Z5n7SWmqDyLXek8GBsbh0w4wlAokw9OhgOL1vYRGOZzo0:uP7tsiKop9n7MqoXeOBKh0p29SgRQN2

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Windows

C2

andreastrahan.ddns.net:1604

Mutex

386657da1e60be4194c71697712e8f87

Attributes
  • reg_key

    386657da1e60be4194c71697712e8f87

  • splitter

    |'|'|

Signatures

Files

  • cf380595e45b974557b1d1e3eac70acd12d8cb3e3b349849925379927d6a3eb6
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections