General

  • Target

    3586f0b04a4f6d3bf6cbaf20ea4b85ab255084faa94048df7b28bd63a0da3ef4

  • Size

    29KB

  • MD5

    40b2cb02f25665bb108fc046d36834ac

  • SHA1

    5328f7b1977edaa8a094312ad9bd08590889e7a9

  • SHA256

    3586f0b04a4f6d3bf6cbaf20ea4b85ab255084faa94048df7b28bd63a0da3ef4

  • SHA512

    6f8f8b6ec816db5edcb04e756398498e14162a46a36effdd8b39b61c130755c85e505fa7247d3ef79335489f217745a2a7a2c2bcd94530ff660b49a3af0274e2

  • SSDEEP

    768:Y7oCkGW1PxXaPzzsqkreyBKh0p29SgRHu:Y7oCl4FHKhG29jHu

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

ابن ديالى صاكرهم

C2

hussen-wael.no-ip.biz:4342

Mutex

ecc7c8c51c0850c1ec247c7fd3602f20

Attributes
  • reg_key

    ecc7c8c51c0850c1ec247c7fd3602f20

  • splitter

    |'|'|

Signatures

Files

  • 3586f0b04a4f6d3bf6cbaf20ea4b85ab255084faa94048df7b28bd63a0da3ef4
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections