General

  • Target

    8519de78c19f8ae3a77c3d9ffadbf89a92fe28e002a762f35db3e9ce0611d165

  • Size

    44KB

  • MD5

    19bf748bfb8b8971c6101e94f7a9698f

  • SHA1

    2c771504cb451608712999e15c4e235cc610f9c3

  • SHA256

    8519de78c19f8ae3a77c3d9ffadbf89a92fe28e002a762f35db3e9ce0611d165

  • SHA512

    cbb24c6e84eb6e77fe61f12c020ec604e3a063fbcfca3d9553ca409c6d125c3d254af42381975e469e076f8adee9279a4dfb5b87550396a77af2135bb1ddbb56

  • SSDEEP

    768:m7nMsanZRnQqIXeOBKh0p29SgRhxYDGe6Ye:m7nkQx/KhG29jhxYDn

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

explorer

C2

mimo-salah.bo-ip.biz:1177

Mutex

ed6e2bf930f6d35b3ac57c049d10ac2c

Attributes
  • reg_key

    ed6e2bf930f6d35b3ac57c049d10ac2c

  • splitter

    |'|'|

Signatures

Files

  • 8519de78c19f8ae3a77c3d9ffadbf89a92fe28e002a762f35db3e9ce0611d165
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections