General

  • Target

    84031726f6ddf070e9246cb0c1000ca02f93a59cdff310ca371cfbefa9c3d4a5

  • Size

    55KB

  • MD5

    60ecb1d740505cb7af01e0b50899029b

  • SHA1

    2b25f0d0360e06152dedd7a14f7e156776cbc72c

  • SHA256

    84031726f6ddf070e9246cb0c1000ca02f93a59cdff310ca371cfbefa9c3d4a5

  • SHA512

    39f32bb1fc82c7cc75c114398381bb934523c59ec223ff40997b012eeee32df0166d2ee181a804c5f0fb524340e3eeba95c898ee31727700f081b5cc6968997d

  • SSDEEP

    768:DOmhtIiRpcnuIJSfxD3iAkJtUKDTixtgJT:DOmhuiRWuIJQxD3nytU1xtgJ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

C.F

C2

cool-fire.no-ip.org:5552

Mutex

eae4d631755d2f2da965690c0fa3ea1c

Attributes
  • reg_key

    eae4d631755d2f2da965690c0fa3ea1c

  • splitter

    |'|'|

Signatures

Files

  • 84031726f6ddf070e9246cb0c1000ca02f93a59cdff310ca371cfbefa9c3d4a5
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections