Overview

overview

10

Static

static

10

a7670a1fa0...bf.exe

windows7-x64

10

a7670a1fa0...bf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7670a1fa0a4e6ae82288f4e67b8cf112aa98c5ed1af25a12ceee5e345629cbf

  • Size

    29KB

  • MD5

    949e8732ab117b814097ff93cceee266

  • SHA1

    27ed08e03289abcaaa67eb4fbf1d65a199993925

  • SHA256

    a7670a1fa0a4e6ae82288f4e67b8cf112aa98c5ed1af25a12ceee5e345629cbf

  • SHA512

    81e75004d7ce62a84f3351dece338b45b476d99b870fded2827f3ea4c1095d3a035ab0ce0fca4fc6d44130fb090b9db1b5172642469151340e3e2f7a10faf3d6

  • SSDEEP

    384:5KLNl7zRVoIY6EXl53NfzGOmqDQ576We/aGBsbh0w4wlAokw9OhgOL1vYRGOZzvF:m7noIYTV7zAqM6WedBKh0p29SgRHGu

Score
10/10
fucked by firasnjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Fucked By Firas

C2

zokomek.no-ip.org:1177

Mutex

23556fb1360f366337f97c924e76ead3

Attributes
  • reg_key

    23556fb1360f366337f97c924e76ead3

  • splitter

    |'|'|

Signatures

Files

  • a7670a1fa0a4e6ae82288f4e67b8cf112aa98c5ed1af25a12ceee5e345629cbf
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections