General

  • Target

    82673ff45344c7dc1d47921a3f300c56b478f3c24e7a82c581a9d4ac50820849

  • Size

    23KB

  • MD5

    603502fa7a930816789fb5393e36b990

  • SHA1

    c65fd6145259b07f057d1ab4fdf252b91d812147

  • SHA256

    82673ff45344c7dc1d47921a3f300c56b478f3c24e7a82c581a9d4ac50820849

  • SHA512

    7fa155597ad0705c352af86714840264290027060a9ec52ef6c9af7c08d337bd6c8da9f8ef65d6762d5c1246a352d632bb696882cab25fb2f04f8d44842b7c6a

  • SSDEEP

    384:QDMKFYuEEhERvoBG16Xuy0MHNw6Tg1Y+75JTFmRvR6JZlbw8hqIusZzZlC:Q4W4V6+yDRpcnuv

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

pipo

C2

hamilessel.ddns.net:5552

Mutex

6a064a4e3ab72267f35894b6b45a3f26

Attributes
  • reg_key

    6a064a4e3ab72267f35894b6b45a3f26

  • splitter

    |'|'|

Signatures

Files

  • 82673ff45344c7dc1d47921a3f300c56b478f3c24e7a82c581a9d4ac50820849
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections