General

  • Target

    1f1012a0fc8f090e1a0cbdc97f65d82a711c0f68c8696a7cbf5efb73bda9a3f8

  • Size

    48KB

  • MD5

    d84bfaeb0df1286f07e8db34a2d56cd8

  • SHA1

    b41b38c3bed59ea961e825b499587a23ea3c9ac5

  • SHA256

    1f1012a0fc8f090e1a0cbdc97f65d82a711c0f68c8696a7cbf5efb73bda9a3f8

  • SHA512

    ff6810ef2066e40d255c753bad7e5453836590c1e936bddef9f61acff699acc623512a579674dcb5fd85ceeb76893d2426e69843985379dc0d8144823bc0b795

  • SSDEEP

    384:Q4Q+SAN7uprgvM5OSUswZXg69gbm4hfpFmRvR6JZlbw8hqIusZzZtlp13hjn+9iQ:iOaxVULRpcnu4pzj+cJOSut6mMFTP6

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

مهم

C2

amer12345nofal.no-ip.biz:5552

Mutex

4c2a5c8711a2372b022ead8bdf55eaf5

Attributes
  • reg_key

    4c2a5c8711a2372b022ead8bdf55eaf5

  • splitter

    |'|'|

Signatures

Files

  • 1f1012a0fc8f090e1a0cbdc97f65d82a711c0f68c8696a7cbf5efb73bda9a3f8
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections