General

  • Target

    5ed5d1fdfa2215ebd6f6f5c18e9a6ae85b4a9258430da766308476167ce2fe77

  • Size

    90KB

  • MD5

    5cbeef7dc3f38621279ed5636229a4a3

  • SHA1

    cb91a71d65824af3b7af8a7c859ee9e1e621641e

  • SHA256

    5ed5d1fdfa2215ebd6f6f5c18e9a6ae85b4a9258430da766308476167ce2fe77

  • SHA512

    4e223427da9d93c9231b0210ea46d04f8f424ec2034fb27a7779f2a8c583a36ef5450932e609f98bfae1335a83def2b9767e89eef6c3ad10224a9d5286bf0f47

  • SSDEEP

    1536:z9EJLdyRWuub9IvJ6dznlpgod8zWyA0zLKb7tmsF0f3/t:BEJLI0RcJ6dBpgKQ/A0zijOP

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Zamtalk

C2

ahriman.no-ip.org:1372

Mutex

1059a9f8fd1ffa25b317dbfab72db436

Attributes
  • reg_key

    1059a9f8fd1ffa25b317dbfab72db436

  • splitter

    |'|'|

Signatures

Files

  • 5ed5d1fdfa2215ebd6f6f5c18e9a6ae85b4a9258430da766308476167ce2fe77
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections