General

  • Target

    f5e2324e72bacd81e4caf5412afb37e5a56339fa786361943d23ce4992646d02

  • Size

    29KB

  • MD5

    a45ebb16a8b22e714f26594e8513b3e3

  • SHA1

    42d372907f82c907cdde28ecb9dd66366bc121fb

  • SHA256

    f5e2324e72bacd81e4caf5412afb37e5a56339fa786361943d23ce4992646d02

  • SHA512

    c688300e8ab37fe4b79b6ba1591b78b2a0e1fe2edd5727f7a360a0a091db6407800da6d15738427ecbff48e8b7f46fc531747bf93d307fc493b2367842d24fcb

  • SSDEEP

    384:f+Pfol7hPpkYuU7gj5lssT0ZNGemqDuiae40tqGBsbh0w4wlAokw9OhgOL1vYRGW:n7TkYuy21TyNYq5ae3BKh0p29SgRgRu

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

hh

C2

zal3ahack.no-ip.info:1177

Mutex

8c6facdee998b9e04b5b01b845b35e62

Attributes
  • reg_key

    8c6facdee998b9e04b5b01b845b35e62

  • splitter

    |'|'|

Signatures

Files

  • f5e2324e72bacd81e4caf5412afb37e5a56339fa786361943d23ce4992646d02
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections