Overview

overview

10

Static

static

10

5d71b76632...8a.exe

windows7-x64

10

5d71b76632...8a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d71b766328e4dc24ff9908994117ca6b5442c8cff9ff14c9a0350575051558a

  • Size

    219KB

  • MD5

    5b3d05bff692d42d83ff39892c962862

  • SHA1

    60841d7fcd82cabe8fd106eb4ac1e466763bc5d7

  • SHA256

    5d71b766328e4dc24ff9908994117ca6b5442c8cff9ff14c9a0350575051558a

  • SHA512

    0fb8ad8e41b00532e8c4763d25fc914f856fb7b36de7bb3fd3ace9900bf14bc03c5e5a92f8e15d09deea1c367ea00e98ad34890838b6ced7a3c83c8564cb2b59

  • SSDEEP

    3072:mbhmBRheA297RLK2XuL0UtODHDxMCk1ZKlSgvu:WmBR897RLK2UVgDHDxjhv

Score
10/10
xxx hacker xxxnjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

xXx HACKER xXx

C2

atoo5050.no-ip.biz:1177

Mutex

5cd8f17f4086744065eb0992a09e05a2

Attributes
  • reg_key

    5cd8f17f4086744065eb0992a09e05a2

  • splitter

    |'|'|

Signatures

Files

  • 5d71b766328e4dc24ff9908994117ca6b5442c8cff9ff14c9a0350575051558a
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections